ket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="680000002800310f00"/20, @ANYRES32=r3, @ANYBLOB="00000000045eb690b8ec354b6fcd8b2610004ff7cfffff000000000a0001006261736d630100003800020034000300300000000b0001006d6972720500000000000000000006000c00abff00000000000000005ac919d246b303b4ac95b4382a41c0c734f28506eaa12a2a82325ac07e0bc5690ca6ecf70c5b43d0102b230cb9578b313b4b49bd344f5f1a6a26d85d1b510e8ba6487fc2e1910c71bc9ed12694bc76975ff9e54fe89df0df5f499bf0dd083e650cb73d18c27979d9c4ac5ad15911c2090ea17088d91fc5879e9ac3ce0b77d28b28eede074139eb7d4a54aaad6263da14daeba8c3bff0df46ccac00"/252], 0x68}}, 0x0) [ 181.673539][T12948] RBP: 0000000000000000 R08: 0000000020000098 R09: 0000000000000000 [ 181.681498][T12948] R10: 00000000000001c0 R11: 0000000000000293 R12: 0000000000000001 [ 181.689455][T12948] R13: 0000000000000004 R14: 0000000000000004 R15: 00000000200000a8 [ 181.754877][T12973] FAULT_INJECTION: forcing a failure. [ 181.754877][T12973] name failslab, interval 1, probability 0, space 0, times 0 [ 181.774007][T12973] CPU: 1 PID: 12973 Comm: syz-executor.3 Not tainted 5.9.0-rc4-syzkaller #0 [ 181.782672][T12973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 181.792708][T12973] Call Trace: [ 181.795987][T12973] dump_stack+0x10f/0x19d [ 181.800358][T12973] should_fail+0x23c/0x250 [ 181.804782][T12973] __should_failslab+0x81/0x90 [ 181.809558][T12973] should_failslab+0x5/0x20 [ 181.814049][T12973] slab_pre_alloc_hook+0x20/0xd0 [ 181.819007][T12973] kmem_cache_alloc+0x4f/0x2d0 [ 181.823776][T12973] ? __alloc_file+0x2e/0x1f0 [ 181.828492][T12973] __alloc_file+0x2e/0x1f0 [ 181.832938][T12973] alloc_empty_file+0xcd/0x1c0 [ 181.837745][T12973] alloc_file+0x3a/0x280 [ 181.841981][T12973] alloc_file_pseudo+0xe2/0x130 [ 181.846819][T12973] __shmem_file_setup+0x14c/0x1d0 07:00:48 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) [ 181.851828][T12973] shmem_file_setup+0x37/0x40 [ 181.856586][T12973] __se_sys_memfd_create+0x231/0x380 [ 181.861866][T12973] __x64_sys_memfd_create+0x2d/0x40 [ 181.867052][T12973] do_syscall_64+0x39/0x80 [ 181.871485][T12973] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 181.877362][T12973] RIP: 0033:0x45d5b9 [ 181.881244][T12973] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 181.900839][T12973] RSP: 002b:00007fd2c87e4998 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 181.909242][T12973] RAX: ffffffffffffffda RBX: 0000000020000080 RCX: 000000000045d5b9 [ 181.917198][T12973] RDX: 0000000020000098 RSI: 0000000000000000 RDI: 00000000004c2043 [ 181.925155][T12973] RBP: 0000000000000380 R08: 0000000020000098 R09: 0000000000000000 [ 181.933171][T12973] R10: fe03f80fe03f80ff R11: 0000000000000246 R12: 0000000000000001 [ 181.941129][T12973] R13: 00007ffdb49f15af R14: 00007fd2c87e59c0 R15: 000000000118cf4c 07:00:48 executing program 5 (fault-call:0 fault-nth:11): syz_read_part_table(0x40000800, 0x1, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff0a0000010000000000ffffff8500e931190000000000000680ffffff82000000e100e2fe87770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 07:00:48 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) 07:00:48 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = syz_io_uring_setup(0x76d1, &(0x7f0000000040), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x1, 0x0, 0x4000, 0x0, 0x0) 07:00:48 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="680000002800310f00"/20, @ANYRES32=r3, @ANYBLOB="00000000045eb690b8ec354b6fcd8b2610004ff7cfffff000000000a0001006261736d630100003800020034000300300000000b0001006d6972720500000000000000000006000c00abff00000000000000005ac919d246b303b4ac95b4382a41c0c734f28506eaa12a2a82325ac07e0bc5690ca6ecf70c5b43d0102b230cb9578b313b4b49bd344f5f1a6a26d85d1b510e8ba6487fc2e1910c71bc9ed12694bc76975ff9e54fe89df0df5f499bf0dd083e650cb73d18c27979d9c4ac5ad15911c2090ea17088d91fc5879e9ac3ce0b77d28b28eede074139eb7d4a54aaad6263da14daeba8c3bff0df46ccac00"/252], 0x68}}, 0x0) 07:00:48 executing program 3 (fault-call:0 fault-nth:4): syz_read_part_table(0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff0a0000010000000000ffffff8500e931190000000000000680ffffff82000000e100e2fe87770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 07:00:48 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) [ 182.063232][T12987] FAULT_INJECTION: forcing a failure. [ 182.063232][T12987] name failslab, interval 1, probability 0, space 0, times 0 [ 182.063565][T12991] FAULT_INJECTION: forcing a failure. [ 182.063565][T12991] name failslab, interval 1, probability 0, space 0, times 0 [ 182.111804][T12987] CPU: 0 PID: 12987 Comm: syz-executor.5 Not tainted 5.9.0-rc4-syzkaller #0 [ 182.120505][T12987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 182.130547][T12987] Call Trace: [ 182.134699][T12987] dump_stack+0x10f/0x19d [ 182.139023][T12987] should_fail+0x23c/0x250 [ 182.143473][T12987] __should_failslab+0x81/0x90 [ 182.148225][T12987] should_failslab+0x5/0x20 [ 182.152718][T12987] slab_pre_alloc_hook+0x20/0xd0 [ 182.157645][T12987] ? tomoyo_realpath_from_path+0x98/0x3c0 [ 182.163351][T12987] __kmalloc+0x78/0x310 [ 182.167492][T12987] ? tomoyo_realpath_from_path+0x98/0x3c0 [ 182.173209][T12987] tomoyo_realpath_from_path+0x98/0x3c0 [ 182.178753][T12987] tomoyo_check_open_permission+0xaf/0x370 [ 182.184580][T12987] tomoyo_file_open+0xd0/0xe0 [ 182.189312][T12987] security_file_open+0x3f/0x90 [ 182.194152][T12987] do_dentry_open+0x22d/0x890 [ 182.198818][T12987] vfs_open+0x43/0x50 [ 182.202792][T12987] path_openat+0x1844/0x20a0 [ 182.207450][T12987] ? balance_dirty_pages_ratelimited+0x10b/0x890 [ 182.213765][T12987] do_filp_open+0xbd/0x1d0 [ 182.218168][T12987] ? _raw_spin_unlock+0x2e/0x50 [ 182.223053][T12987] ? __alloc_fd+0x33c/0x390 [ 182.227561][T12987] do_sys_openat2+0x33b/0x500 [ 182.232267][T12987] __x64_sys_open+0xe2/0x110 [ 182.236846][T12987] do_syscall_64+0x39/0x80 [ 182.241251][T12987] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 182.247131][T12987] RIP: 0033:0x417101 [ 182.251087][T12987] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 182.270758][T12987] RSP: 002b:00007fbc572c5990 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 182.279154][T12987] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 0000000000417101 [ 182.287117][T12987] RDX: 0000000000000040 RSI: 0000000000000002 RDI: 00007fbc572c5bb0 [ 182.295100][T12987] RBP: 0000000000000000 R08: 0000000020000098 R09: 0000000000000000 [ 182.303071][T12987] R10: 00000000000001c0 R11: 0000000000000293 R12: 0000000000000001 07:00:48 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="680000002800310f00"/20, @ANYRES32=r3, @ANYBLOB="00000000045eb690b8ec354b6fcd8b2610004ff7cfffff000000000a0001006261736d630100003800020034000300300000000b0001006d6972720500000000000000000006000c00abff00000000000000005ac919d246b303b4ac95b4382a41c0c734f28506eaa12a2a82325ac07e0bc5690ca6ecf70c5b43d0102b230cb9578b313b4b49bd344f5f1a6a26d85d1b510e8ba6487fc2e1910c71bc9ed12694bc76975ff9e54fe89df0df5f499bf0dd083e650cb73d18c27979d9c4ac5ad15911c2090ea17088d91fc5879e9ac3ce0b77d28b28eede074139eb7d4a54aaad6263da14daeba8c3bff0df46ccac00"/252], 0x68}}, 0x0) 07:00:48 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) 07:00:48 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) 07:00:48 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) 07:00:48 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) [ 182.311027][T12987] R13: 0000000000000004 R14: 0000000000000004 R15: 00000000200000a8 [ 182.325207][T12991] CPU: 0 PID: 12991 Comm: syz-executor.3 Not tainted 5.9.0-rc4-syzkaller #0 [ 182.334003][T12991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 182.344044][T12991] Call Trace: [ 182.347333][T12991] dump_stack+0x10f/0x19d [ 182.351655][T12991] should_fail+0x23c/0x250 [ 182.356078][T12991] __should_failslab+0x81/0x90 [ 182.360840][T12991] should_failslab+0x5/0x20 [ 182.365334][T12991] slab_pre_alloc_hook+0x20/0xd0 [ 182.370363][T12991] kmem_cache_alloc+0x4f/0x2d0 [ 182.375136][T12991] ? security_file_alloc+0x30/0x190 [ 182.380406][T12991] security_file_alloc+0x30/0x190 [ 182.385419][T12991] __alloc_file+0x83/0x1f0 [ 182.389852][T12991] alloc_empty_file+0xcd/0x1c0 [ 182.394603][T12991] alloc_file+0x3a/0x280 [ 182.398829][T12991] alloc_file_pseudo+0xe2/0x130 [ 182.403665][T12991] __shmem_file_setup+0x14c/0x1d0 [ 182.408676][T12991] shmem_file_setup+0x37/0x40 [ 182.413399][T12991] __se_sys_memfd_create+0x231/0x380 [ 182.418676][T12991] __x64_sys_memfd_create+0x2d/0x40 [ 182.423866][T12991] do_syscall_64+0x39/0x80 [ 182.428273][T12991] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 182.434175][T12991] RIP: 0033:0x45d5b9 [ 182.438087][T12991] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 07:00:48 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) [ 182.457710][T12991] RSP: 002b:00007fd2c87e4998 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 182.466117][T12991] RAX: ffffffffffffffda RBX: 0000000020000080 RCX: 000000000045d5b9 [ 182.474079][T12991] RDX: 0000000020000098 RSI: 0000000000000000 RDI: 00000000004c2043 [ 182.482043][T12991] RBP: 0000000000000380 R08: 0000000020000098 R09: 0000000000000000 [ 182.490000][T12991] R10: fe03f80fe03f80ff R11: 0000000000000246 R12: 0000000000000001 [ 182.497959][T12991] R13: 00007ffdb49f15af R14: 00007fd2c87e59c0 R15: 000000000118cf4c [ 182.603755][T12987] ERROR: Out of memory at tomoyo_realpath_from_path. [ 182.652166][T12987] loop5: p2 < > p3 p4 < > [ 182.656591][T12987] loop5: partition table partially beyond EOD, truncated [ 182.665872][T12987] loop5: p3 start 4276224225 is beyond EOD, truncated 07:00:49 executing program 5 (fault-call:0 fault-nth:12): syz_read_part_table(0x40000800, 0x1, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff0a0000010000000000ffffff8500e931190000000000000680ffffff82000000e100e2fe87770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 07:00:49 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/18, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) 07:00:49 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="680000002800310f00"/20, @ANYRES32=r3, @ANYBLOB="00000000045eb690b8ec354b6fcd8b2610004ff7cfffff000000000a0001006261736d630100003800020034000300300000000b0001006d6972720500000000000000000006000c00abff00000000000000005ac919d246b303b4ac95b4382a41c0c734f28506eaa12a2a82325ac07e0bc5690ca6ecf70c5b43d0102b230cb9578b313b4b49bd344f5f1a6a26d85d1b510e8ba6487fc2e1910c71bc9ed12694bc76975ff9e54fe89df0df5f499bf0dd083e650cb73d18c27979d9c4ac5ad15911c2090ea17088d91fc5879e9ac3ce0b77d28b28eede074139eb7d4a54aaad6263da14daeba8c3bff0df46ccac00"/252], 0x68}}, 0x0) 07:00:49 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = syz_io_uring_setup(0x76d1, &(0x7f0000000040), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x1, 0x0, 0x800000, 0x0, 0x0) 07:00:49 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) 07:00:49 executing program 3 (fault-call:0 fault-nth:5): syz_read_part_table(0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff0a0000010000000000ffffff8500e931190000000000000680ffffff82000000e100e2fe87770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) [ 182.754728][T13032] FAULT_INJECTION: forcing a failure. [ 182.754728][T13032] name failslab, interval 1, probability 0, space 0, times 0 [ 182.780101][T13035] FAULT_INJECTION: forcing a failure. [ 182.780101][T13035] name failslab, interval 1, probability 0, space 0, times 0 07:00:49 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) 07:00:49 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/18, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) [ 182.804781][T13032] CPU: 0 PID: 13032 Comm: syz-executor.3 Not tainted 5.9.0-rc4-syzkaller #0 [ 182.813485][T13032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 182.823528][T13032] Call Trace: [ 182.826874][T13032] dump_stack+0x10f/0x19d [ 182.831200][T13032] should_fail+0x23c/0x250 [ 182.835612][T13032] __should_failslab+0x81/0x90 [ 182.840374][T13032] should_failslab+0x5/0x20 [ 182.844878][T13032] slab_pre_alloc_hook+0x20/0xd0 07:00:49 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) 07:00:49 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/18, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) [ 182.849816][T13032] ? tomoyo_realpath_from_path+0x98/0x3c0 [ 182.855523][T13032] __kmalloc+0x78/0x310 [ 182.859685][T13032] ? tomoyo_realpath_from_path+0x98/0x3c0 [ 182.865413][T13032] tomoyo_realpath_from_path+0x98/0x3c0 [ 182.871008][T13032] tomoyo_path_perm+0xc6/0x330 [ 182.875800][T13032] tomoyo_path_truncate+0x18/0x20 [ 182.880824][T13032] security_path_truncate+0x7f/0xd0 [ 182.886125][T13032] do_sys_ftruncate+0x2fa/0x3e0 [ 182.890973][T13032] ? debug_smp_processor_id+0x18/0x20 [ 182.896435][T13032] ? fpregs_assert_state_consistent+0x7e/0x90 07:00:49 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/19, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) 07:00:49 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) [ 182.902500][T13032] __x64_sys_ftruncate+0x2f/0x40 [ 182.907438][T13032] do_syscall_64+0x39/0x80 [ 182.911862][T13032] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 182.917754][T13032] RIP: 0033:0x45d587 [ 182.921652][T13032] Code: 24 29 d7 48 69 ff e8 03 00 00 48 89 7c 24 08 48 89 e7 e8 dc e4 ff ff 48 83 c4 18 c3 0f 1f 80 00 00 00 00 b8 4d 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 182.941264][T13032] RSP: 002b:00007fd2c87e4998 EFLAGS: 00000217 ORIG_RAX: 000000000000004d [ 182.949664][T13032] RAX: ffffffffffffffda RBX: 0000000020000080 RCX: 000000000045d587 [ 182.957621][T13032] RDX: 0000000020000098 RSI: 0000000000000380 RDI: 0000000000000004 [ 182.965580][T13032] RBP: 0000000000000380 R08: 0000000020000098 R09: 0000000000000000 [ 182.973539][T13032] R10: fe03f80fe03f80ff R11: 0000000000000217 R12: 0000000000000001 [ 182.981497][T13032] R13: 0000000000000004 R14: 0000000000000004 R15: 000000000118cf4c [ 182.994353][T13035] CPU: 1 PID: 13035 Comm: syz-executor.5 Not tainted 5.9.0-rc4-syzkaller #0 [ 183.003023][T13035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 183.013060][T13035] Call Trace: [ 183.016453][T13035] dump_stack+0x10f/0x19d [ 183.020841][T13035] should_fail+0x23c/0x250 [ 183.025254][T13035] __should_failslab+0x81/0x90 [ 183.031092][T13035] should_failslab+0x5/0x20 [ 183.035587][T13035] slab_pre_alloc_hook+0x20/0xd0 [ 183.040514][T13035] ? tomoyo_encode2+0x1e2/0x350 [ 183.045354][T13035] __kmalloc+0x78/0x310 [ 183.049496][T13035] ? tomoyo_encode2+0x1e2/0x350 [ 183.054333][T13035] tomoyo_encode2+0x1e2/0x350 [ 183.059017][T13035] tomoyo_realpath_from_path+0x36e/0x3c0 [ 183.064730][T13035] tomoyo_check_open_permission+0xaf/0x370 [ 183.070530][T13035] tomoyo_file_open+0xd0/0xe0 [ 183.075195][T13035] security_file_open+0x3f/0x90 [ 183.080041][T13035] do_dentry_open+0x22d/0x890 [ 183.084710][T13035] vfs_open+0x43/0x50 [ 183.088680][T13035] path_openat+0x1844/0x20a0 [ 183.093262][T13035] ? balance_dirty_pages_ratelimited+0x10b/0x890 [ 183.099582][T13035] do_filp_open+0xbd/0x1d0 [ 183.103989][T13035] ? _raw_spin_unlock+0x2e/0x50 [ 183.108836][T13035] ? __alloc_fd+0x33c/0x390 [ 183.113353][T13035] do_sys_openat2+0x33b/0x500 [ 183.118040][T13035] __x64_sys_open+0xe2/0x110 [ 183.122617][T13035] do_syscall_64+0x39/0x80 [ 183.127028][T13035] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 183.132926][T13035] RIP: 0033:0x417101 [ 183.136874][T13035] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 183.156465][T13035] RSP: 002b:00007fbc572c5990 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 183.164948][T13035] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 0000000000417101 [ 183.172925][T13035] RDX: 0000000000000040 RSI: 0000000000000002 RDI: 00007fbc572c5bb0 [ 183.180895][T13035] RBP: 0000000000000000 R08: 0000000020000098 R09: 0000000000000000 [ 183.188857][T13035] R10: 00000000000001c0 R11: 0000000000000293 R12: 0000000000000001 [ 183.196813][T13035] R13: 0000000000000004 R14: 0000000000000004 R15: 00000000200000a8 [ 183.261799][T13032] ERROR: Out of memory at tomoyo_realpath_from_path. [ 183.291370][T13035] ERROR: Out of memory at tomoyo_realpath_from_path. [ 183.292074][T13032] loop3: p2 < > p3 p4 < > [ 183.304048][T13032] loop3: partition table partially beyond EOD, truncated [ 183.311271][T13032] loop3: p2 start 25 is beyond EOD, truncated [ 183.318329][T13032] loop3: p3 start 4276224225 is beyond EOD, truncated [ 183.327001][T13032] loop3: p4 size 2 extends beyond EOD, truncated [ 183.372393][T13035] loop5: p2 < > p3 p4 < > [ 183.376850][T13035] loop5: partition table partially beyond EOD, truncated [ 183.384576][T13035] loop5: p3 start 4276224225 is beyond EOD, truncated 07:00:49 executing program 5 (fault-call:0 fault-nth:13): syz_read_part_table(0x40000800, 0x1, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff0a0000010000000000ffffff8500e931190000000000000680ffffff82000000e100e2fe87770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 07:00:49 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) 07:00:49 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/19, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) 07:00:49 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="680000002800310f00"/20, @ANYRES32=r3, @ANYBLOB="00000000045eb690b8ec354b6fcd8b2610004ff7cfffff000000000a0001006261736d630100003800020034000300300000000b0001006d6972720500000000000000000006000c00abff00000000000000005ac919d246b303b4ac95b4382a41c0c734f28506eaa12a2a82325ac07e0bc5690ca6ecf70c5b43d0102b230cb9578b313b4b49bd344f5f1a6a26d85d1b510e8ba6487fc2e1910c71bc9ed12694bc76975ff9e54fe89df0df5f499bf0dd083e650cb73d18c27979d9c4ac5ad15911c2090ea17088d91fc5879e9ac3ce0b77d28b28eede074139eb7d4a54aaad6263da14daeba8c3bff0df46ccac00"/252], 0x68}}, 0x0) 07:00:49 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = syz_io_uring_setup(0x76d1, &(0x7f0000000040), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x1, 0x0, 0x3000000, 0x0, 0x0) 07:00:49 executing program 3 (fault-call:0 fault-nth:6): syz_read_part_table(0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff0a0000010000000000ffffff8500e931190000000000000680ffffff82000000e100e2fe87770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 07:00:50 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/19, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) [ 183.512201][T13094] FAULT_INJECTION: forcing a failure. [ 183.512201][T13094] name failslab, interval 1, probability 0, space 0, times 0 [ 183.525893][T13095] FAULT_INJECTION: forcing a failure. [ 183.525893][T13095] name failslab, interval 1, probability 0, space 0, times 0 [ 183.542716][T13097] __nla_validate_parse: 29 callbacks suppressed [ 183.542723][T13097] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 183.565988][T13094] CPU: 0 PID: 13094 Comm: syz-executor.5 Not tainted 5.9.0-rc4-syzkaller #0 [ 183.574753][T13094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 183.584791][T13094] Call Trace: [ 183.588153][T13094] dump_stack+0x10f/0x19d [ 183.592473][T13094] should_fail+0x23c/0x250 [ 183.596918][T13094] __should_failslab+0x81/0x90 [ 183.601676][T13094] should_failslab+0x5/0x20 [ 183.606950][T13094] slab_pre_alloc_hook+0x20/0xd0 [ 183.611877][T13094] ? tomoyo_realpath_from_path+0x98/0x3c0 [ 183.617581][T13094] __kmalloc+0x78/0x310 [ 183.621726][T13094] ? tomoyo_realpath_from_path+0x98/0x3c0 [ 183.627438][T13094] tomoyo_realpath_from_path+0x98/0x3c0 [ 183.633005][T13094] tomoyo_path_number_perm+0xc1/0x2d0 [ 183.638373][T13094] ? putname+0xa5/0xc0 [ 183.642511][T13094] ? __rcu_read_unlock+0x4b/0x260 [ 183.647539][T13094] tomoyo_file_ioctl+0x1c/0x20 [ 183.652294][T13094] security_file_ioctl+0x45/0x90 [ 183.657222][T13094] __se_sys_ioctl+0x48/0x140 [ 183.661804][T13094] __x64_sys_ioctl+0x3f/0x50 [ 183.666379][T13094] do_syscall_64+0x39/0x80 [ 183.670816][T13094] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 183.676743][T13094] RIP: 0033:0x45d427 [ 183.680630][T13094] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 bd b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 183.700218][T13094] RSP: 002b:00007fbc572c5998 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 183.708652][T13094] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045d427 07:00:50 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) 07:00:50 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) [ 183.716645][T13094] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 183.724601][T13094] RBP: 0000000000000000 R08: 0000000020000098 R09: 0000000000000000 [ 183.732560][T13094] R10: 00000000000001c0 R11: 0000000000000246 R12: 0000000000000001 [ 183.740525][T13094] R13: 0000000000000004 R14: 0000000000000004 R15: 00000000200000a8 [ 183.751760][T13095] CPU: 0 PID: 13095 Comm: syz-executor.3 Not tainted 5.9.0-rc4-syzkaller #0 07:00:50 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) [ 183.760423][T13095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 183.770462][T13095] Call Trace: [ 183.773742][T13095] dump_stack+0x10f/0x19d [ 183.778062][T13095] should_fail+0x23c/0x250 [ 183.782474][T13095] __should_failslab+0x81/0x90 [ 183.787229][T13095] should_failslab+0x5/0x20 [ 183.791736][T13095] slab_pre_alloc_hook+0x20/0xd0 [ 183.796657][T13095] ? tomoyo_encode2+0x1e2/0x350 [ 183.801494][T13095] __kmalloc+0x78/0x310 [ 183.805635][T13095] ? tomoyo_encode2+0x1e2/0x350 [ 183.810496][T13095] tomoyo_encode2+0x1e2/0x350 [ 183.815212][T13095] ? dynamic_dname+0xf0/0xf0 [ 183.819795][T13095] tomoyo_realpath_from_path+0x36e/0x3c0 [ 183.825488][T13095] tomoyo_path_perm+0xc6/0x330 [ 183.830247][T13095] tomoyo_path_truncate+0x18/0x20 [ 183.835283][T13095] security_path_truncate+0x7f/0xd0 [ 183.840473][T13095] do_sys_ftruncate+0x2fa/0x3e0 [ 183.845321][T13095] ? debug_smp_processor_id+0x18/0x20 [ 183.850685][T13095] ? fpregs_assert_state_consistent+0x7e/0x90 [ 183.856741][T13095] __x64_sys_ftruncate+0x2f/0x40 [ 183.861667][T13095] do_syscall_64+0x39/0x80 07:00:50 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) [ 183.866104][T13095] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 183.872072][T13095] RIP: 0033:0x45d587 [ 183.875952][T13095] Code: 24 29 d7 48 69 ff e8 03 00 00 48 89 7c 24 08 48 89 e7 e8 dc e4 ff ff 48 83 c4 18 c3 0f 1f 80 00 00 00 00 b8 4d 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 183.895544][T13095] RSP: 002b:00007fd2c87e4998 EFLAGS: 00000217 ORIG_RAX: 000000000000004d [ 183.903956][T13095] RAX: ffffffffffffffda RBX: 0000000020000080 RCX: 000000000045d587 07:00:50 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff), 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) [ 183.911914][T13095] RDX: 0000000020000098 RSI: 0000000000000380 RDI: 0000000000000004 [ 183.919946][T13095] RBP: 0000000000000380 R08: 0000000020000098 R09: 0000000000000000 [ 183.927936][T13095] R10: fe03f80fe03f80ff R11: 0000000000000217 R12: 0000000000000001 [ 183.935898][T13095] R13: 0000000000000004 R14: 0000000000000004 R15: 000000000118cf4c [ 183.979370][T13124] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.2'. [ 184.000988][T13094] ERROR: Out of memory at tomoyo_realpath_from_path. [ 184.008285][T13095] ERROR: Out of memory at tomoyo_realpath_from_path. [ 184.072548][T13094] loop5: p2 < > p3 p4 < > [ 184.077388][T13094] loop5: partition table partially beyond EOD, truncated [ 184.085558][T13094] loop5: p3 start 4276224225 is beyond EOD, truncated [ 184.112399][ T5086] loop3: p2 < > p3 p4 < > 07:00:50 executing program 5 (fault-call:0 fault-nth:14): syz_read_part_table(0x40000800, 0x1, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff0a0000010000000000ffffff8500e931190000000000000680ffffff82000000e100e2fe87770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 07:00:50 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) 07:00:50 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = syz_io_uring_setup(0x76d1, &(0x7f0000000040), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x1, 0x0, 0x40000000, 0x0, 0x0) 07:00:50 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff), 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) 07:00:50 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="680000002800310f00"/20, @ANYRES32=r3, @ANYBLOB="00000000045eb690b8ec354b6fcd8b2610004ff7cfffff000000000a0001006261736d630100003800020034000300300000000b0001006d6972720500000000000000000006000c00abff00000000000000005ac919d246b303b4ac95b4382a41c0c734f28506eaa12a2a82325ac07e0bc5690ca6ecf70c5b43d0102b230cb9578b313b4b49bd344f5f1a6a26d85d1b510e8ba6487fc2e1910c71bc9ed12694bc76975ff9e54fe89df0df5f499bf0dd083e650cb73d18c27979d9c4ac5ad15911c2090ea17088d91fc5879e9ac3ce0b77d28b28eede074139eb7d4a54aaad6263da14daeba8c3bff0df46ccac00"/252], 0x68}}, 0x0) [ 184.116930][ T5086] loop3: partition table partially beyond EOD, truncated [ 184.124802][ T5086] loop3: p2 start 25 is beyond EOD, truncated [ 184.130864][ T5086] loop3: p3 start 4276224225 is beyond EOD, truncated [ 184.138077][ T5086] loop3: p4 size 2 extends beyond EOD, truncated [ 184.146318][T13095] loop3: p2 < > p3 p4 < > [ 184.150773][T13095] loop3: partition table partially beyond EOD, truncated [ 184.158590][T13095] loop3: p2 start 25 is beyond EOD, truncated [ 184.165186][T13095] loop3: p3 start 4276224225 is beyond EOD, truncated [ 184.173141][T13095] loop3: p4 size 2 extends beyond EOD, truncated [ 184.215183][T13151] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 184.244776][T13158] FAULT_INJECTION: forcing a failure. [ 184.244776][T13158] name failslab, interval 1, probability 0, space 0, times 0 [ 184.266727][T13171] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.2'. [ 184.268737][T13158] CPU: 1 PID: 13158 Comm: syz-executor.5 Not tainted 5.9.0-rc4-syzkaller #0 [ 184.284659][T13158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 184.294712][T13158] Call Trace: [ 184.298009][T13158] dump_stack+0x10f/0x19d [ 184.302323][T13158] should_fail+0x23c/0x250 [ 184.306740][T13158] __should_failslab+0x81/0x90 [ 184.311496][T13158] should_failslab+0x5/0x20 [ 184.316060][T13158] slab_pre_alloc_hook+0x20/0xd0 [ 184.320985][T13158] ? tomoyo_encode2+0x1e2/0x350 [ 184.323978][T13175] FAULT_INJECTION: forcing a failure. [ 184.323978][T13175] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 184.325895][T13158] __kmalloc+0x78/0x310 [ 184.325906][T13158] ? tomoyo_encode2+0x1e2/0x350 [ 184.325916][T13158] tomoyo_encode2+0x1e2/0x350 [ 184.325933][T13158] tomoyo_realpath_from_path+0x36e/0x3c0 [ 184.358409][T13158] tomoyo_path_number_perm+0xc1/0x2d0 [ 184.363795][T13158] ? putname+0xa5/0xc0 [ 184.367858][T13158] ? __rcu_read_unlock+0x4b/0x260 [ 184.372914][T13158] tomoyo_file_ioctl+0x1c/0x20 [ 184.377665][T13158] security_file_ioctl+0x45/0x90 [ 184.382592][T13158] __se_sys_ioctl+0x48/0x140 [ 184.387172][T13158] __x64_sys_ioctl+0x3f/0x50 [ 184.391755][T13158] do_syscall_64+0x39/0x80 [ 184.396255][T13158] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 184.402154][T13158] RIP: 0033:0x45d427 [ 184.406035][T13158] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 bd b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 184.425636][T13158] RSP: 002b:00007fbc572c5998 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 184.434035][T13158] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045d427 [ 184.441992][T13158] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 184.449948][T13158] RBP: 0000000000000000 R08: 0000000020000098 R09: 0000000000000000 [ 184.457904][T13158] R10: 00000000000001c0 R11: 0000000000000246 R12: 0000000000000001 07:00:50 executing program 3 (fault-call:0 fault-nth:7): syz_read_part_table(0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff0a0000010000000000ffffff8500e931190000000000000680ffffff82000000e100e2fe87770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 07:00:50 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff), 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) 07:00:50 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) 07:00:50 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = syz_io_uring_setup(0x76d1, &(0x7f0000000040), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x1, 0x0, 0xeffdffff, 0x0, 0x0) [ 184.465966][T13158] R13: 0000000000000004 R14: 0000000000000004 R15: 00000000200000a8 [ 184.495351][T13175] CPU: 0 PID: 13175 Comm: syz-executor.3 Not tainted 5.9.0-rc4-syzkaller #0 [ 184.504032][T13175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 184.514075][T13175] Call Trace: [ 184.514516][T13158] ERROR: Out of memory at tomoyo_realpath_from_path. [ 184.517414][T13175] dump_stack+0x10f/0x19d [ 184.517432][T13175] should_fail+0x23c/0x250 [ 184.532845][T13175] __alloc_pages_nodemask+0xd8/0x380 [ 184.538148][T13175] alloc_pages_vma+0x3e6/0x890 [ 184.542884][T13175] shmem_alloc_and_acct_page+0x2ba/0x650 [ 184.548492][T13175] shmem_getpage_gfp+0x669/0x19c0 [ 184.553509][T13175] shmem_write_begin+0x83/0x100 [ 184.558350][T13175] generic_perform_write+0x196/0x390 [ 184.563619][T13175] __generic_file_write_iter+0x154/0x330 [ 184.569266][T13175] generic_file_write_iter+0x2f3/0x3e0 [ 184.574696][T13175] vfs_write+0x665/0x6f0 [ 184.578921][T13175] __x64_sys_pwrite64+0xf5/0x150 [ 184.583847][T13175] do_syscall_64+0x39/0x80 [ 184.588255][T13175] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 184.594251][T13175] RIP: 0033:0x417167 [ 184.598135][T13175] Code: 12 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 a1 18 00 00 c3 48 83 ec 08 e8 a7 f9 ff ff 48 89 04 24 49 89 ca b8 12 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 ed f9 ff ff 48 89 d0 48 83 c4 08 48 3d 01 07:00:51 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) 07:00:51 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) 07:00:51 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="680000002800310f00"/20, @ANYRES32=r3, @ANYBLOB="00000000045eb690b8ec354b6fcd8b2610004ff7cfffff000000000a0001006261736d630100003800020034000300300000000b0001006d6972720500000000000000000006000c00abff00000000000000005ac919d246b303b4ac95b4382a41c0c734f28506eaa12a2a82325ac07e0bc5690ca6ecf70c5b43d0102b230cb9578b313b4b49bd344f5f1a6a26d85d1b510e8ba6487fc2e1910c71bc9ed12694bc76975ff9e54fe89df0df5f499bf0dd083e650cb73d18c27979d9c4ac5ad15911c2090ea17088d91fc5879e9ac3ce0b77d28b28eede074139eb7d4a54aaad6263da14daeba8c3bff0df46ccac00"/252], 0x68}}, 0x0) [ 184.617760][T13175] RSP: 002b:00007fd2c87e4990 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 [ 184.626177][T13175] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000417167 [ 184.634143][T13175] RDX: 0000000000000040 RSI: 0000000020000000 RDI: 0000000000000004 [ 184.642188][T13175] RBP: 0000000000000000 R08: 0000000020000098 R09: 0000000000000000 [ 184.650167][T13175] R10: 00000000000001c0 R11: 0000000000000293 R12: 0000000000000001 [ 184.658209][T13175] R13: 0000000000000004 R14: 0000000000000004 R15: 0000000020000090 [ 184.738166][T13158] loop5: p2 < > p3 p4 < > [ 184.742821][T13158] loop5: partition table partially beyond EOD, truncated [ 184.765780][T13158] loop5: p3 start 4276224225 is beyond EOD, truncated [ 184.769655][T13199] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.2'. [ 184.805777][T13175] Dev loop3: unable to read RDB block 1 [ 184.811315][T13175] loop3: unable to read partition table [ 184.824308][T13175] loop3: partition table beyond EOD, truncated [ 184.830458][T13175] loop_reread_partitions: partition scan of loop3 () failed (rc=-5) 07:00:51 executing program 5 (fault-call:0 fault-nth:15): syz_read_part_table(0x40000800, 0x1, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff0a0000010000000000ffffff8500e931190000000000000680ffffff82000000e100e2fe87770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 07:00:51 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = syz_io_uring_setup(0x76d1, &(0x7f0000000040), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x1, 0x0, 0xf5ffffff, 0x0, 0x0) 07:00:51 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) 07:00:51 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) 07:00:51 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="680000002800310f00"/20, @ANYRES32=r3, @ANYBLOB="00000000045eb690b8ec354b6fcd8b2610004ff7cfffff000000000a0001006261736d630100003800020034000300300000000b0001006d6972720500000000000000000006000c00abff00000000000000005ac919d246b303b4ac95b4382a41c0c734f28506eaa12a2a82325ac07e0bc5690ca6ecf70c5b43d0102b230cb9578b313b4b49bd344f5f1a6a26d85d1b510e8ba6487fc2e1910c71bc9ed12694bc76975ff9e54fe89df0df5f499bf0dd083e650cb73d18c27979d9c4ac5ad15911c2090ea17088d91fc5879e9ac3ce0b77d28b28eede074139eb7d4a54aaad6263da14daeba8c3bff0df46ccac00"/252], 0x68}}, 0x0) 07:00:51 executing program 3 (fault-call:0 fault-nth:8): syz_read_part_table(0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff0a0000010000000000ffffff8500e931190000000000000680ffffff82000000e100e2fe87770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) [ 184.950557][T13219] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.2'. [ 184.952781][T13222] FAULT_INJECTION: forcing a failure. [ 184.952781][T13222] name failslab, interval 1, probability 0, space 0, times 0 [ 184.969310][T13223] FAULT_INJECTION: forcing a failure. [ 184.969310][T13223] name failslab, interval 1, probability 0, space 0, times 0 [ 184.981470][T13222] CPU: 0 PID: 13222 Comm: syz-executor.3 Not tainted 5.9.0-rc4-syzkaller #0 [ 184.993864][T13222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 185.003903][T13222] Call Trace: [ 185.007292][T13222] dump_stack+0x10f/0x19d [ 185.011617][T13222] should_fail+0x23c/0x250 [ 185.016043][T13222] __should_failslab+0x81/0x90 [ 185.020793][T13222] should_failslab+0x5/0x20 [ 185.025284][T13222] slab_pre_alloc_hook+0x20/0xd0 [ 185.030207][T13222] kmem_cache_alloc+0x4f/0x2d0 [ 185.034958][T13222] ? getname_flags+0x84/0x3d0 [ 185.039629][T13222] getname_flags+0x84/0x3d0 [ 185.044119][T13222] getname+0x15/0x20 [ 185.048003][T13222] do_sys_openat2+0x2f2/0x500 [ 185.052668][T13222] __x64_sys_open+0xe2/0x110 [ 185.057242][T13222] do_syscall_64+0x39/0x80 [ 185.061706][T13222] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 185.067657][T13222] RIP: 0033:0x417101 [ 185.071537][T13222] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 185.091239][T13222] RSP: 002b:00007fd2c87e4990 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 185.099634][T13222] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 0000000000417101 [ 185.107692][T13222] RDX: 0000000000000040 RSI: 0000000000000002 RDI: 00007fd2c87e4bb0 [ 185.115748][T13222] RBP: 0000000000000000 R08: 0000000020000098 R09: 0000000000000000 [ 185.123758][T13222] R10: 00000000000001c0 R11: 0000000000000293 R12: 0000000000000001 [ 185.131713][T13222] R13: 0000000000000004 R14: 0000000000000004 R15: 00000000200000a8 [ 185.139676][T13223] CPU: 1 PID: 13223 Comm: syz-executor.5 Not tainted 5.9.0-rc4-syzkaller #0 [ 185.148340][T13223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 185.158376][T13223] Call Trace: [ 185.161656][T13223] dump_stack+0x10f/0x19d [ 185.165992][T13223] should_fail+0x23c/0x250 [ 185.170402][T13223] __should_failslab+0x81/0x90 [ 185.175184][T13223] should_failslab+0x5/0x20 [ 185.179672][T13223] slab_pre_alloc_hook+0x20/0xd0 [ 185.184626][T13223] ? loop_set_status_from_info+0x3a0/0x3a0 [ 185.190420][T13223] kmem_cache_alloc_trace+0x54/0x2d0 [ 185.195738][T13223] ? __kthread_create_on_node+0x7a/0x270 07:00:51 executing program 3 (fault-call:0 fault-nth:9): syz_read_part_table(0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff0a0000010000000000ffffff8500e931190000000000000680ffffff82000000e100e2fe87770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 07:00:51 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) 07:00:51 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) 07:00:51 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="680000002800310f00"/20, @ANYRES32=r3, @ANYBLOB="00000000045eb690b8ec354b6fcd8b2610004ff7cfffff000000000a0001006261736d630100003800020034000300300000000b0001006d6972720500000000000000000006000c00abff00000000000000005ac919d246b303b4ac95b4382a41c0c734f28506eaa12a2a82325ac07e0bc5690ca6ecf70c5b43d0102b230cb9578b313b4b49bd344f5f1a6a26d85d1b510e8ba6487fc2e1910c71bc9ed12694bc76975ff9e54fe89df0df5f499bf0dd083e650cb73d18c27979d9c4ac5ad15911c2090ea17088d91fc5879e9ac3ce0b77d28b28eede074139eb7d4a54aaad6263da14daeba8c3bff0df46ccac00"/252], 0x68}}, 0x0) [ 185.201393][T13223] ? loop_set_status_from_info+0x3a0/0x3a0 [ 185.207183][T13223] __kthread_create_on_node+0x7a/0x270 [ 185.212668][T13223] ? loop_set_status_from_info+0x3a0/0x3a0 [ 185.218446][T13223] kthread_create_on_node+0x72/0xa0 [ 185.223614][T13223] loop_configure+0x55f/0xc70 [ 185.228317][T13223] lo_ioctl+0x554/0x1190 [ 185.232544][T13223] ? blkdev_common_ioctl+0xaae/0x10b0 [ 185.237936][T13223] ? putname+0xa5/0xc0 [ 185.241993][T13223] ? lo_release+0x130/0x130 [ 185.246474][T13223] blkdev_ioctl+0x1cf/0x410 [ 185.250996][T13223] block_ioctl+0x6d/0x80 [ 185.255228][T13223] ? blkdev_iopoll+0x80/0x80 [ 185.259903][T13223] __se_sys_ioctl+0xcb/0x140 [ 185.264465][T13223] __x64_sys_ioctl+0x3f/0x50 [ 185.269024][T13223] do_syscall_64+0x39/0x80 [ 185.273412][T13223] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 185.279371][T13223] RIP: 0033:0x45d427 [ 185.283240][T13223] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 bd b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 185.302876][T13223] RSP: 002b:00007fbc572c5998 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 185.311284][T13223] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045d427 [ 185.319231][T13223] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 185.327177][T13223] RBP: 0000000000000000 R08: 0000000020000098 R09: 0000000000000000 [ 185.335128][T13223] R10: 00000000000001c0 R11: 0000000000000246 R12: 0000000000000001 [ 185.343081][T13223] R13: 0000000000000004 R14: 0000000000000004 R15: 00000000200000a8 07:00:51 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) 07:00:51 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = syz_io_uring_setup(0x76d1, &(0x7f0000000040), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x1, 0x0, 0xfffffdef, 0x0, 0x0) 07:00:51 executing program 5 (fault-call:0 fault-nth:16): syz_read_part_table(0x40000800, 0x1, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff0a0000010000000000ffffff8500e931190000000000000680ffffff82000000e100e2fe87770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 07:00:51 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) [ 185.424939][T13237] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.2'. [ 185.468061][T13243] FAULT_INJECTION: forcing a failure. [ 185.468061][T13243] name failslab, interval 1, probability 0, space 0, times 0 [ 185.488561][T13243] CPU: 0 PID: 13243 Comm: syz-executor.3 Not tainted 5.9.0-rc4-syzkaller #0 [ 185.497252][T13243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 185.507312][T13243] Call Trace: [ 185.510602][T13243] dump_stack+0x10f/0x19d [ 185.514982][T13243] should_fail+0x23c/0x250 [ 185.519390][T13243] __should_failslab+0x81/0x90 [ 185.524142][T13243] should_failslab+0x5/0x20 [ 185.528639][T13243] slab_pre_alloc_hook+0x20/0xd0 [ 185.533644][T13243] kmem_cache_alloc+0x4f/0x2d0 [ 185.538403][T13243] ? __alloc_file+0x2e/0x1f0 [ 185.542421][T13248] FAULT_INJECTION: forcing a failure. [ 185.542421][T13248] name failslab, interval 1, probability 0, space 0, times 0 [ 185.543001][T13243] __alloc_file+0x2e/0x1f0 [ 185.543050][T13243] alloc_empty_file+0xcd/0x1c0 [ 185.564759][T13243] path_openat+0x6a/0x20a0 [ 185.569173][T13243] ? balance_dirty_pages_ratelimited+0x10b/0x890 [ 185.575497][T13243] ? generic_perform_write+0x322/0x390 [ 185.580946][T13243] ? shmem_write_begin+0x100/0x100 [ 185.586054][T13243] do_filp_open+0xbd/0x1d0 [ 185.590458][T13243] ? expand_files+0x55/0x510 [ 185.595043][T13243] ? __check_object_size+0x253/0x310 [ 185.600338][T13243] ? _raw_spin_unlock+0x2e/0x50 [ 185.605178][T13243] ? __alloc_fd+0x33c/0x390 [ 185.609702][T13243] do_sys_openat2+0x33b/0x500 [ 185.614368][T13243] __x64_sys_open+0xe2/0x110 [ 185.618944][T13243] do_syscall_64+0x39/0x80 [ 185.623348][T13243] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 185.629327][T13243] RIP: 0033:0x417101 [ 185.633206][T13243] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 185.652824][T13243] RSP: 002b:00007fd2c87e4990 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 185.661220][T13243] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 0000000000417101 [ 185.669234][T13243] RDX: 0000000000000040 RSI: 0000000000000002 RDI: 00007fd2c87e4bb0 [ 185.677189][T13243] RBP: 0000000000000000 R08: 0000000020000098 R09: 0000000000000000 [ 185.685144][T13243] R10: 00000000000001c0 R11: 0000000000000293 R12: 0000000000000001 [ 185.693097][T13243] R13: 0000000000000004 R14: 0000000000000004 R15: 00000000200000a8 [ 185.701062][T13248] CPU: 1 PID: 13248 Comm: syz-executor.5 Not tainted 5.9.0-rc4-syzkaller #0 07:00:52 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 07:00:52 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="680000002800310f00"/20, @ANYRES32=r3, @ANYBLOB="00000000045eb690b8ec354b6fcd8b2610004ff7cfffff000000000a0001006261736d630100003800020034000300300000000b0001006d6972720500000000000000000006000c00abff00000000000000005ac919d246b303b4ac95b4382a41c0c734f28506eaa12a2a82325ac07e0bc5690ca6ecf70c5b43d0102b230cb9578b313b4b49bd344f5f1a6a26d85d1b510e8ba6487fc2e1910c71bc9ed12694bc76975ff9e54fe89df0df5f499bf0dd083e650cb73d18c27979d9c4ac5ad15911c2090ea17088d91fc5879e9ac3ce0b77d28b28eede074139eb7d4a54aaad6263da14daeba8c3bff0df46ccac00"/252], 0x68}}, 0x0) 07:00:52 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) [ 185.709730][T13248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 185.719770][T13248] Call Trace: [ 185.723065][T13248] dump_stack+0x10f/0x19d [ 185.727383][T13248] should_fail+0x23c/0x250 [ 185.731812][T13248] __should_failslab+0x81/0x90 [ 185.736574][T13248] should_failslab+0x5/0x20 [ 185.741139][T13248] slab_pre_alloc_hook+0x20/0xd0 [ 185.746060][T13248] kmem_cache_alloc+0x4f/0x2d0 [ 185.750814][T13248] ? __kernfs_new_node+0x6a/0x340 [ 185.755826][T13248] __kernfs_new_node+0x6a/0x340 [ 185.760694][T13248] ? __cgroup_account_cputime+0x213/0x230 07:00:52 executing program 3 (fault-call:0 fault-nth:10): syz_read_part_table(0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff0a0000010000000000ffffff8500e931190000000000000680ffffff82000000e100e2fe87770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) [ 185.767187][T13248] ? update_load_avg+0x1ad/0x2d0 [ 185.772174][T13248] kernfs_create_dir_ns+0x5e/0x140 [ 185.777329][T13248] internal_create_group+0x12f/0x890 [ 185.782619][T13248] ? check_preempt_wakeup+0x1cb/0x370 [ 185.787970][T13248] sysfs_create_group+0x1b/0x20 [ 185.792794][T13248] loop_configure+0x97c/0xc70 [ 185.797441][T13248] lo_ioctl+0x554/0x1190 [ 185.801659][T13248] ? blkdev_common_ioctl+0xaae/0x10b0 [ 185.807005][T13248] ? putname+0xa5/0xc0 [ 185.811047][T13248] ? lo_release+0x130/0x130 [ 185.815558][T13248] blkdev_ioctl+0x1cf/0x410 [ 185.820108][T13248] block_ioctl+0x6d/0x80 [ 185.824354][T13248] ? blkdev_iopoll+0x80/0x80 [ 185.828916][T13248] __se_sys_ioctl+0xcb/0x140 [ 185.833486][T13248] __x64_sys_ioctl+0x3f/0x50 [ 185.838068][T13248] do_syscall_64+0x39/0x80 [ 185.842469][T13248] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 185.848339][T13248] RIP: 0033:0x45d427 07:00:52 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = syz_io_uring_setup(0x76d1, &(0x7f0000000040), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x1, 0x0, 0xfffffff5, 0x0, 0x0) [ 185.852207][T13248] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 bd b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 185.871805][T13248] RSP: 002b:00007fbc572c5998 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 185.880215][T13248] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045d427 [ 185.888168][T13248] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 185.896113][T13248] RBP: 0000000000000000 R08: 0000000020000098 R09: 0000000000000000 [ 185.904065][T13248] R10: 00000000000001c0 R11: 0000000000000246 R12: 0000000000000001 [ 185.912008][T13248] R13: 0000000000000004 R14: 0000000000000004 R15: 00000000200000a8 07:00:52 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="680000002800310f00"/20, @ANYRES32=r3, @ANYBLOB="00000000045eb690b8ec354b6fcd8b2610004ff7cfffff000000000a0001006261736d630100003800020034000300300000000b0001006d6972720500000000000000000006000c00abff00000000000000005ac919d246b303b4ac95b4382a41c0c734f28506eaa12a2a82325ac07e0bc5690ca6ecf70c5b43d0102b230cb9578b313b4b49bd344f5f1a6a26d85d1b510e8ba6487fc2e1910c71bc9ed12694bc76975ff9e54fe89df0df5f499bf0dd083e650cb73d18c27979d9c4ac5ad15911c2090ea17088d91fc5879e9ac3ce0b77d28b28eede074139eb7d4a54aaad6263da14daeba8c3bff0df46ccac00"/252], 0x68}}, 0x0) [ 185.947096][T13248] loop5: p2 < > p3 p4 < > [ 185.951528][T13248] loop5: partition table partially beyond EOD, truncated [ 185.955260][T13261] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.2'. [ 185.982961][T13248] loop5: p3 start 4276224225 is beyond EOD, truncated 07:00:52 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) [ 186.004863][T13265] FAULT_INJECTION: forcing a failure. [ 186.004863][T13265] name failslab, interval 1, probability 0, space 0, times 0 07:00:52 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) 07:00:52 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = syz_io_uring_setup(0x76d1, &(0x7f0000000040), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x1, 0x0, 0x10000000000, 0x0, 0x0) [ 186.057252][T13283] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.2'. [ 186.067985][T13265] CPU: 1 PID: 13265 Comm: syz-executor.3 Not tainted 5.9.0-rc4-syzkaller #0 [ 186.076644][T13265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 186.086683][T13265] Call Trace: [ 186.089963][T13265] dump_stack+0x10f/0x19d [ 186.094286][T13265] should_fail+0x23c/0x250 [ 186.098697][T13265] __should_failslab+0x81/0x90 [ 186.103455][T13265] should_failslab+0x5/0x20 [ 186.107948][T13265] slab_pre_alloc_hook+0x20/0xd0 [ 186.112873][T13265] kmem_cache_alloc+0x4f/0x2d0 [ 186.117701][T13265] ? security_file_alloc+0x30/0x190 [ 186.122892][T13265] security_file_alloc+0x30/0x190 [ 186.127907][T13265] __alloc_file+0x83/0x1f0 [ 186.132317][T13265] alloc_empty_file+0xcd/0x1c0 [ 186.137070][T13265] path_openat+0x6a/0x20a0 [ 186.141476][T13265] ? balance_dirty_pages_ratelimited+0x10b/0x890 [ 186.147792][T13265] ? generic_perform_write+0x322/0x390 [ 186.153220][T13265] ? shmem_write_begin+0x100/0x100 [ 186.158302][T13265] do_filp_open+0xbd/0x1d0 [ 186.162748][T13265] ? expand_files+0x55/0x510 [ 186.167331][T13265] ? __check_object_size+0x253/0x310 [ 186.172592][T13265] ? _raw_spin_unlock+0x2e/0x50 [ 186.177431][T13265] ? __alloc_fd+0x33c/0x390 [ 186.181920][T13265] do_sys_openat2+0x33b/0x500 [ 186.186577][T13265] __x64_sys_open+0xe2/0x110 [ 186.191142][T13265] do_syscall_64+0x39/0x80 [ 186.195531][T13265] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 186.201399][T13265] RIP: 0033:0x417101 [ 186.205267][T13265] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 186.224840][T13265] RSP: 002b:00007fd2c87e4990 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 186.233221][T13265] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 0000000000417101 [ 186.241163][T13265] RDX: 0000000000000040 RSI: 0000000000000002 RDI: 00007fd2c87e4bb0 [ 186.249104][T13265] RBP: 0000000000000000 R08: 0000000020000098 R09: 0000000000000000 07:00:52 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="680000002800310f00"/20, @ANYRES32=r3, @ANYBLOB="00000000045eb690b8ec354b6fcd8b2610004ff7cfffff000000000a0001006261736d630100003800020034000300300000000b0001006d6972720500000000000000000006000c00abff00000000000000005ac919d246b303b4ac95b4382a41c0c734f28506eaa12a2a82325ac07e0bc5690ca6ecf70c5b43d0102b230cb9578b313b4b49bd344f5f1a6a26d85d1b510e8ba6487fc2e1910c71bc9ed12694bc76975ff9e54fe89df0df5f499bf0dd083e650cb73d18c27979d9c4ac5ad15911c2090ea17088d91fc5879e9ac3ce0b77d28b28eede074139eb7d4a54aaad6263da14daeba8c3bff0df46ccac00"/252], 0x68}}, 0x0) [ 186.257048][T13265] R10: 00000000000001c0 R11: 0000000000000293 R12: 0000000000000001 [ 186.264990][T13265] R13: 0000000000000004 R14: 0000000000000004 R15: 00000000200000a8 07:00:52 executing program 5: syz_read_part_table(0x40000800, 0x1, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff0a0000010000000000ffffff8500e931190000000000000680ffffff82000000e100e2fe87770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 07:00:52 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142, 0x8e}, {&(0x7f0000000180)=""/145, 0x91}, {&(0x7f00000002c0)=""/80, 0x50}, {&(0x7f0000000340)=""/126, 0x7e}, {&(0x7f0000000400)=""/130, 0x82}, {&(0x7f00000004c0)=""/149, 0x95}], 0x6, &(0x7f0000000240)=""/16, 0x10}}], 0x2, 0x0, 0x0) 07:00:52 executing program 3 (fault-call:0 fault-nth:11): syz_read_part_table(0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff0a0000010000000000ffffff8500e931190000000000000680ffffff82000000e100e2fe87770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 07:00:52 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) 07:00:52 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142, 0x8e}, {&(0x7f0000000180)=""/145, 0x91}, {&(0x7f00000002c0)=""/80, 0x50}, {&(0x7f0000000340)=""/126, 0x7e}, {&(0x7f0000000400)=""/130, 0x82}, {&(0x7f00000004c0)=""/149, 0x95}], 0x6, &(0x7f0000000240)=""/16, 0x10}}], 0x2, 0x0, 0x0) [ 186.345229][T13297] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.2'. [ 186.354364][T13299] FAULT_INJECTION: forcing a failure. [ 186.354364][T13299] name failslab, interval 1, probability 0, space 0, times 0 07:00:52 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="680000002800310f00"/20, @ANYRES32=r3, @ANYBLOB="00000000045eb690b8ec354b6fcd8b2610004ff7cfffff000000000a0001006261736d630100003800020034000300300000000b0001006d6972720500000000000000000006000c00abff00000000000000005ac919d246b303b4ac95b4382a41c0c734f28506eaa12a2a82325ac07e0bc5690ca6ecf70c5b43d0102b230cb9578b313b4b49bd344f5f1a6a26d85d1b510e8ba6487fc2e1910c71bc9ed12694bc76975ff9e54fe89df0df5f499bf0dd083e650cb73d18c27979d9c4ac5ad15911c2090ea17088d91fc5879e9ac3ce0b77d28b28eede074139eb7d4a54aaad6263da14daeba8c3bff0df46ccac00"/252], 0x68}}, 0x0) 07:00:52 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = syz_io_uring_setup(0x76d1, &(0x7f0000000040), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x1, 0x0, 0x80000000000000, 0x0, 0x0) [ 186.412903][T13300] loop5: p2 < > p3 p4 < > [ 186.423941][T13300] loop5: partition table partially beyond EOD, truncated [ 186.438921][T13299] CPU: 1 PID: 13299 Comm: syz-executor.3 Not tainted 5.9.0-rc4-syzkaller #0 [ 186.447594][T13299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 186.457636][T13299] Call Trace: [ 186.460918][T13299] dump_stack+0x10f/0x19d [ 186.465239][T13299] should_fail+0x23c/0x250 [ 186.469645][T13299] __should_failslab+0x81/0x90 [ 186.474397][T13299] should_failslab+0x5/0x20 [ 186.479025][T13299] slab_pre_alloc_hook+0x20/0xd0 [ 186.484004][T13299] ? tomoyo_realpath_from_path+0x98/0x3c0 [ 186.489737][T13299] __kmalloc+0x78/0x310 [ 186.493901][T13299] ? tomoyo_realpath_from_path+0x98/0x3c0 [ 186.499617][T13299] tomoyo_realpath_from_path+0x98/0x3c0 [ 186.505156][T13299] tomoyo_check_open_permission+0xaf/0x370 [ 186.510961][T13299] tomoyo_file_open+0xd0/0xe0 [ 186.515629][T13299] security_file_open+0x3f/0x90 [ 186.520473][T13299] do_dentry_open+0x22d/0x890 [ 186.525140][T13299] vfs_open+0x43/0x50 [ 186.529118][T13299] path_openat+0x1844/0x20a0 [ 186.533751][T13299] ? balance_dirty_pages_ratelimited+0x10b/0x890 [ 186.540076][T13299] do_filp_open+0xbd/0x1d0 [ 186.544515][T13299] ? _raw_spin_unlock+0x2e/0x50 [ 186.549428][T13299] ? __alloc_fd+0x33c/0x390 [ 186.553923][T13299] do_sys_openat2+0x33b/0x500 [ 186.558599][T13299] __x64_sys_open+0xe2/0x110 [ 186.563178][T13299] do_syscall_64+0x39/0x80 [ 186.567665][T13299] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 186.573585][T13299] RIP: 0033:0x417101 [ 186.577480][T13299] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 186.597072][T13299] RSP: 002b:00007fd2c87e4990 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 186.605548][T13299] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 0000000000417101 07:00:53 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142, 0x8e}, {&(0x7f0000000180)=""/145, 0x91}, {&(0x7f00000002c0)=""/80, 0x50}, {&(0x7f0000000340)=""/126, 0x7e}, {&(0x7f0000000400)=""/130, 0x82}, {&(0x7f00000004c0)=""/149, 0x95}], 0x6, &(0x7f0000000240)=""/16, 0x10}}], 0x2, 0x0, 0x0) 07:00:53 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) 07:00:53 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="680000002800310f00"/20, @ANYRES32=r3, @ANYBLOB="00000000045eb690b8ec354b6fcd8b2610004ff7cfffff000000000a0001006261736d630100003800020034000300300000000b0001006d6972720500000000000000000006000c00abff00000000000000005ac919d246b303b4ac95b4382a41c0c734f28506eaa12a2a82325ac07e0bc5690ca6ecf70c5b43d0102b230cb9578b313b4b49bd344f5f1a6a26d85d1b510e8ba6487fc2e1910c71bc9ed12694bc76975ff9e54fe89df0df5f499bf0dd083e650cb73d18c27979d9c4ac5ad15911c2090ea17088d91fc5879e9ac3ce0b77d28b28eede074139eb7d4a54aaad6263da14daeba8c3bff0df46ccac00"/252], 0x68}}, 0x0) [ 186.613508][T13299] RDX: 0000000000000040 RSI: 0000000000000002 RDI: 00007fd2c87e4bb0 [ 186.621541][T13299] RBP: 0000000000000000 R08: 0000000020000098 R09: 0000000000000000 [ 186.629502][T13299] R10: 00000000000001c0 R11: 0000000000000293 R12: 0000000000000001 [ 186.637460][T13299] R13: 0000000000000004 R14: 0000000000000004 R15: 00000000200000a8 [ 186.646088][T13300] loop5: p3 start 4276224225 is beyond EOD, truncated 07:00:53 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = syz_io_uring_setup(0x76d1, &(0x7f0000000040), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x1, 0x0, 0x300000000000000, 0x0, 0x0) 07:00:53 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x80, 0x0, 0x0, &(0x7f0000000240)=""/16, 0x10}}], 0x2, 0x0, 0x0) [ 186.680883][T13299] ERROR: Out of memory at tomoyo_realpath_from_path. 07:00:53 executing program 5: syz_read_part_table(0x40000007, 0x1, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff0a0000010000000000ffffff8500e931190000000000000680ffffff82000000e100e2fe87770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 07:00:53 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="680000002800310f00"/20, @ANYRES32=r3, @ANYBLOB="00000000045eb690b8ec354b6fcd8b2610004ff7cfffff000000000a0001006261736d630100003800020034000300300000000b0001006d6972720500000000000000000006000c00abff00000000000000005ac919d246b303b4ac95b4382a41c0c734f28506eaa12a2a82325ac07e0bc5690ca6ecf70c5b43d0102b230cb9578b313b4b49bd344f5f1a6a26d85d1b510e8ba6487fc2e1910c71bc9ed12694bc76975ff9e54fe89df0df5f499bf0dd083e650cb73d18c27979d9c4ac5ad15911c2090ea17088d91fc5879e9ac3ce0b77d28b28eede074139eb7d4a54aaad6263da14daeba8c3bff0df46ccac00"/252], 0x68}}, 0x0) [ 186.759195][ T5086] loop3: p2 < > p3 p4 < > [ 186.771437][ T5086] loop3: partition table partially beyond EOD, truncated [ 186.794893][ T5086] loop3: p2 start 25 is beyond EOD, truncated [ 186.807369][ T5086] loop3: p3 start 4276224225 is beyond EOD, truncated [ 186.814538][ T5086] loop3: p4 size 2 extends beyond EOD, truncated [ 186.822067][T13299] loop3: p2 < > p3 p4 < > [ 186.826477][T13299] loop3: partition table partially beyond EOD, truncated [ 186.833841][T13299] loop3: p2 start 25 is beyond EOD, truncated [ 186.840212][T13299] loop3: p3 start 4276224225 is beyond EOD, truncated [ 186.847142][T13299] loop3: p4 size 2 extends beyond EOD, truncated [ 186.893641][T13359] loop5: p2 < > p3 p4 < > [ 186.898129][T13359] loop5: partition table partially beyond EOD, truncated [ 186.905810][T13359] loop5: p3 start 4276224225 is beyond EOD, truncated 07:00:53 executing program 3 (fault-call:0 fault-nth:12): syz_read_part_table(0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff0a0000010000000000ffffff8500e931190000000000000680ffffff82000000e100e2fe87770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 07:00:53 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) 07:00:53 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x80, 0x0, 0x0, &(0x7f0000000240)=""/16, 0x10}}], 0x2, 0x0, 0x0) 07:00:53 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = syz_io_uring_setup(0x76d1, &(0x7f0000000040), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x1, 0x0, 0x4000000000000000, 0x0, 0x0) 07:00:53 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="680000002800310f00"/20, @ANYRES32=r3, @ANYBLOB="00000000045eb690b8ec354b6fcd8b2610004ff7cfffff000000000a0001006261736d630100003800020034000300300000000b0001006d6972720500000000000000000006000c00abff00000000000000005ac919d246b303b4ac95b4382a41c0c734f28506eaa12a2a82325ac07e0bc5690ca6ecf70c5b43d0102b230cb9578b313b4b49bd344f5f1a6a26d85d1b510e8ba6487fc2e1910c71bc9ed12694bc76975ff9e54fe89df0df5f499bf0dd083e650cb73d18c27979d9c4ac5ad15911c2090ea17088d91fc5879e9ac3ce0b77d28b28eede074139eb7d4a54aaad6263da14daeba8c3bff0df46ccac00"/252], 0x68}}, 0x0) 07:00:53 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="680000002800310f00"/20, @ANYRES32=r3, @ANYBLOB="00000000045eb690b8ec354b6fcd8b2610004ff7cfffff000000000a0001006261736d630100003800020034000300300000000b0001006d6972720500000000000000000006000c00abff00000000000000005ac919d246b303b4ac95b4382a41c0c734f28506eaa12a2a82325ac07e0bc5690ca6ecf70c5b43d0102b230cb9578b313b4b49bd344f5f1a6a26d85d1b510e8ba6487fc2e1910c71bc9ed12694bc76975ff9e54fe89df0df5f499bf0dd083e650cb73d18c27979d9c4ac5ad15911c2090ea17088d91fc5879e9ac3ce0b77d28b28eede074139eb7d4a54aaad6263da14daeba8c3bff0df46ccac00"/252], 0x68}}, 0x0) 07:00:53 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x80, 0x0, 0x0, &(0x7f0000000240)=""/16, 0x10}}], 0x2, 0x0, 0x0) [ 187.055887][T13359] loop5: p2 < > p3 p4 < > [ 187.062078][T13359] loop5: partition table partially beyond EOD, truncated [ 187.072229][T13359] loop5: p3 start 4276224225 is beyond EOD, truncated 07:00:53 executing program 5: syz_read_part_table(0x4000000a, 0x1, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff0a0000010000000000ffffff8500e931190000000000000680ffffff82000000e100e2fe87770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 07:00:53 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="680000002800310f00"/20, @ANYRES32=r3, @ANYBLOB="00000000045eb690b8ec354b6fcd8b2610004ff7cfffff000000000a0001006261736d630100003800020034000300300000000b0001006d6972720500000000000000000006000c00abff00000000000000005ac919d246b303b4ac95b4382a41c0c734f28506eaa12a2a82325ac07e0bc5690ca6ecf70c5b43d0102b230cb9578b313b4b49bd344f5f1a6a26d85d1b510e8ba6487fc2e1910c71bc9ed12694bc76975ff9e54fe89df0df5f499bf0dd083e650cb73d18c27979d9c4ac5ad15911c2090ea17088d91fc5879e9ac3ce0b77d28b28eede074139eb7d4a54aaad6263da14daeba8c3bff0df46ccac00"/252], 0x68}}, 0x0) 07:00:53 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) [ 187.128966][T13398] FAULT_INJECTION: forcing a failure. [ 187.128966][T13398] name failslab, interval 1, probability 0, space 0, times 0 [ 187.147781][T13398] CPU: 0 PID: 13398 Comm: syz-executor.3 Not tainted 5.9.0-rc4-syzkaller #0 [ 187.156453][T13398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 187.166497][T13398] Call Trace: [ 187.169778][T13398] dump_stack+0x10f/0x19d [ 187.174130][T13398] should_fail+0x23c/0x250 07:00:53 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x80, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142, 0x8e}, {&(0x7f0000000180)=""/145, 0x91}, {&(0x7f00000002c0)=""/80, 0x50}, {&(0x7f0000000340)=""/126, 0x7e}, {&(0x7f0000000400)=""/130, 0x82}], 0x5, &(0x7f0000000240)=""/16, 0x10}}], 0x2, 0x0, 0x0) [ 187.178535][T13398] __should_failslab+0x81/0x90 [ 187.183288][T13398] should_failslab+0x5/0x20 [ 187.187773][T13398] slab_pre_alloc_hook+0x20/0xd0 [ 187.192701][T13398] ? tomoyo_encode2+0x1e2/0x350 [ 187.197595][T13398] __kmalloc+0x78/0x310 [ 187.201720][T13398] ? tomoyo_encode2+0x1e2/0x350 [ 187.206540][T13398] tomoyo_encode2+0x1e2/0x350 [ 187.211193][T13398] tomoyo_realpath_from_path+0x36e/0x3c0 [ 187.216800][T13398] tomoyo_check_open_permission+0xaf/0x370 [ 187.222617][T13398] tomoyo_file_open+0xd0/0xe0 [ 187.227271][T13398] security_file_open+0x3f/0x90 [ 187.232093][T13398] do_dentry_open+0x22d/0x890 [ 187.236820][T13398] vfs_open+0x43/0x50 [ 187.240798][T13398] path_openat+0x1844/0x20a0 [ 187.245416][T13398] ? balance_dirty_pages_ratelimited+0x10b/0x890 [ 187.251782][T13398] do_filp_open+0xbd/0x1d0 [ 187.256179][T13398] ? _raw_spin_unlock+0x2e/0x50 [ 187.261002][T13398] ? __alloc_fd+0x33c/0x390 [ 187.265533][T13398] do_sys_openat2+0x33b/0x500 [ 187.270182][T13398] __x64_sys_open+0xe2/0x110 [ 187.274809][T13398] do_syscall_64+0x39/0x80 [ 187.279297][T13398] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 187.285156][T13398] RIP: 0033:0x417101 [ 187.289023][T13398] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 187.309216][T13398] RSP: 002b:00007fd2c87e4990 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 187.317596][T13398] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 0000000000417101 07:00:53 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = syz_io_uring_setup(0x76d1, &(0x7f0000000040), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x1, 0x0, 0xeffdffff00000000, 0x0, 0x0) [ 187.325537][T13398] RDX: 0000000000000040 RSI: 0000000000000002 RDI: 00007fd2c87e4bb0 [ 187.333486][T13398] RBP: 0000000000000000 R08: 0000000020000098 R09: 0000000000000000 [ 187.341440][T13398] R10: 00000000000001c0 R11: 0000000000000293 R12: 0000000000000001 [ 187.349383][T13398] R13: 0000000000000004 R14: 0000000000000004 R15: 00000000200000a8 [ 187.359177][T13398] ERROR: Out of memory at tomoyo_realpath_from_path. [ 187.432111][T13398] loop3: p2 < > p3 p4 < > [ 187.436547][T13398] loop3: partition table partially beyond EOD, truncated [ 187.454661][T13398] loop3: p2 start 25 is beyond EOD, truncated [ 187.472241][T13413] loop5: p2 < > p3 p4 < > [ 187.476671][T13413] loop5: partition table partially beyond EOD, truncated [ 187.485073][T13398] loop3: p3 start 4276224225 is beyond EOD, truncated [ 187.492258][T13398] loop3: p4 size 2 extends beyond EOD, truncated [ 187.498871][T13413] loop5: p3 start 4276224225 is beyond EOD, truncated 07:00:54 executing program 3 (fault-call:0 fault-nth:13): syz_read_part_table(0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff0a0000010000000000ffffff8500e931190000000000000680ffffff82000000e100e2fe87770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 07:00:54 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x80, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142, 0x8e}, {&(0x7f0000000180)=""/145, 0x91}, {&(0x7f00000002c0)=""/80, 0x50}, {&(0x7f0000000340)=""/126, 0x7e}, {&(0x7f0000000400)=""/130, 0x82}], 0x5, &(0x7f0000000240)=""/16, 0x10}}], 0x2, 0x0, 0x0) 07:00:54 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) 07:00:54 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/18, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="680000002800310f00"/20, @ANYRES32=r3, @ANYBLOB="00000000045eb690b8ec354b6fcd8b2610004ff7cfffff000000000a0001006261736d630100003800020034000300300000000b0001006d6972720500000000000000000006000c00abff00000000000000005ac919d246b303b4ac95b4382a41c0c734f28506eaa12a2a82325ac07e0bc5690ca6ecf70c5b43d0102b230cb9578b313b4b49bd344f5f1a6a26d85d1b510e8ba6487fc2e1910c71bc9ed12694bc76975ff9e54fe89df0df5f499bf0dd083e650cb73d18c27979d9c4ac5ad15911c2090ea17088d91fc5879e9ac3ce0b77d28b28eede074139eb7d4a54aaad6263da14daeba8c3bff0df46ccac00"/252], 0x68}}, 0x0) 07:00:54 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = syz_io_uring_setup(0x76d1, &(0x7f0000000040), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x1, 0x0, 0xf5ffffff00000000, 0x0, 0x0) 07:00:54 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x80, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142, 0x8e}, {&(0x7f0000000180)=""/145, 0x91}, {&(0x7f00000002c0)=""/80, 0x50}, {&(0x7f0000000340)=""/126, 0x7e}, {&(0x7f0000000400)=""/130, 0x82}], 0x5, &(0x7f0000000240)=""/16, 0x10}}], 0x2, 0x0, 0x0) [ 187.622206][T13447] FAULT_INJECTION: forcing a failure. [ 187.622206][T13447] name failslab, interval 1, probability 0, space 0, times 0 [ 187.637150][T13413] loop5: p2 < > p3 p4 < > [ 187.641625][T13413] loop5: partition table partially beyond EOD, truncated [ 187.642396][T13447] CPU: 1 PID: 13447 Comm: syz-executor.3 Not tainted 5.9.0-rc4-syzkaller #0 [ 187.657284][T13447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 187.667321][T13447] Call Trace: [ 187.670608][T13447] dump_stack+0x10f/0x19d [ 187.671325][T13413] loop5: p3 start 4276224225 is beyond EOD, truncated [ 187.674928][T13447] should_fail+0x23c/0x250 [ 187.674943][T13447] __should_failslab+0x81/0x90 [ 187.674954][T13447] should_failslab+0x5/0x20 [ 187.674965][T13447] slab_pre_alloc_hook+0x20/0xd0 [ 187.675004][T13447] ? tomoyo_realpath_from_path+0x98/0x3c0 [ 187.675053][T13447] __kmalloc+0x78/0x310 [ 187.710217][T13447] ? tomoyo_realpath_from_path+0x98/0x3c0 [ 187.715917][T13447] tomoyo_realpath_from_path+0x98/0x3c0 [ 187.721501][T13447] tomoyo_path_number_perm+0xc1/0x2d0 [ 187.726949][T13447] ? putname+0xa5/0xc0 [ 187.731051][T13447] ? __rcu_read_unlock+0x4b/0x260 [ 187.736056][T13447] tomoyo_file_ioctl+0x1c/0x20 [ 187.740874][T13447] security_file_ioctl+0x45/0x90 [ 187.745797][T13447] __se_sys_ioctl+0x48/0x140 [ 187.750368][T13447] __x64_sys_ioctl+0x3f/0x50 [ 187.754938][T13447] do_syscall_64+0x39/0x80 [ 187.759343][T13447] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 187.765213][T13447] RIP: 0033:0x45d427 [ 187.769087][T13447] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 bd b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 187.788677][T13447] RSP: 002b:00007fd2c87e4998 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 187.797128][T13447] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045d427 [ 187.805081][T13447] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 187.813035][T13447] RBP: 0000000000000000 R08: 0000000020000098 R09: 0000000000000000 07:00:54 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/18, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="680000002800310f00"/20, @ANYRES32=r3, @ANYBLOB="00000000045eb690b8ec354b6fcd8b2610004ff7cfffff000000000a0001006261736d630100003800020034000300300000000b0001006d6972720500000000000000000006000c00abff00000000000000005ac919d246b303b4ac95b4382a41c0c734f28506eaa12a2a82325ac07e0bc5690ca6ecf70c5b43d0102b230cb9578b313b4b49bd344f5f1a6a26d85d1b510e8ba6487fc2e1910c71bc9ed12694bc76975ff9e54fe89df0df5f499bf0dd083e650cb73d18c27979d9c4ac5ad15911c2090ea17088d91fc5879e9ac3ce0b77d28b28eede074139eb7d4a54aaad6263da14daeba8c3bff0df46ccac00"/252], 0x68}}, 0x0) [ 187.821047][T13447] R10: 00000000000001c0 R11: 0000000000000246 R12: 0000000000000001 [ 187.828997][T13447] R13: 0000000000000004 R14: 0000000000000004 R15: 00000000200000a8 [ 187.871785][T13447] ERROR: Out of memory at tomoyo_realpath_from_path. 07:00:54 executing program 5: syz_read_part_table(0x4000000d, 0x1, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff0a0000010000000000ffffff8500e931190000000000000680ffffff82000000e100e2fe87770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 07:00:54 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) 07:00:54 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x80, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142, 0x8e}, {&(0x7f0000000180)=""/145, 0x91}, {&(0x7f00000002c0)=""/80, 0x50}, {&(0x7f0000000340)=""/126, 0x7e}, {&(0x7f0000000400)=""/130, 0x82}, {0x0}], 0x6, &(0x7f0000000240)=""/16, 0x10}}], 0x2, 0x0, 0x0) 07:00:54 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/18, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="680000002800310f00"/20, @ANYRES32=r3, @ANYBLOB="00000000045eb690b8ec354b6fcd8b2610004ff7cfffff000000000a0001006261736d630100003800020034000300300000000b0001006d6972720500000000000000000006000c00abff00000000000000005ac919d246b303b4ac95b4382a41c0c734f28506eaa12a2a82325ac07e0bc5690ca6ecf70c5b43d0102b230cb9578b313b4b49bd344f5f1a6a26d85d1b510e8ba6487fc2e1910c71bc9ed12694bc76975ff9e54fe89df0df5f499bf0dd083e650cb73d18c27979d9c4ac5ad15911c2090ea17088d91fc5879e9ac3ce0b77d28b28eede074139eb7d4a54aaad6263da14daeba8c3bff0df46ccac00"/252], 0x68}}, 0x0) 07:00:54 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = syz_io_uring_setup(0x76d1, &(0x7f0000000040), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x1, 0x0, 0x0, 0x0, 0x3) [ 187.921893][T13447] loop3: p2 < > p3 p4 < > [ 187.926334][T13447] loop3: partition table partially beyond EOD, truncated [ 187.934365][T13447] loop3: p2 start 25 is beyond EOD, truncated [ 187.940427][T13447] loop3: p3 start 4276224225 is beyond EOD, truncated [ 187.948316][T13447] loop3: p4 size 2 extends beyond EOD, truncated 07:00:54 executing program 3 (fault-call:0 fault-nth:14): syz_read_part_table(0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff0a0000010000000000ffffff8500e931190000000000000680ffffff82000000e100e2fe87770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 07:00:54 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/19, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="680000002800310f00"/20, @ANYRES32=r3, @ANYBLOB="00000000045eb690b8ec354b6fcd8b2610004ff7cfffff000000000a0001006261736d630100003800020034000300300000000b0001006d6972720500000000000000000006000c00abff00000000000000005ac919d246b303b4ac95b4382a41c0c734f28506eaa12a2a82325ac07e0bc5690ca6ecf70c5b43d0102b230cb9578b313b4b49bd344f5f1a6a26d85d1b510e8ba6487fc2e1910c71bc9ed12694bc76975ff9e54fe89df0df5f499bf0dd083e650cb73d18c27979d9c4ac5ad15911c2090ea17088d91fc5879e9ac3ce0b77d28b28eede074139eb7d4a54aaad6263da14daeba8c3bff0df46ccac00"/252], 0x68}}, 0x0) 07:00:54 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x80, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142, 0x8e}, {&(0x7f0000000180)=""/145, 0x91}, {&(0x7f00000002c0)=""/80, 0x50}, {&(0x7f0000000340)=""/126, 0x7e}, {&(0x7f0000000400)=""/130, 0x82}, {0x0}], 0x6, &(0x7f0000000240)=""/16, 0x10}}], 0x2, 0x0, 0x0) 07:00:54 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) 07:00:54 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = syz_io_uring_setup(0x76d1, &(0x7f0000000040), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x1, 0x0, 0x0, 0x0, 0x300) 07:00:54 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/19, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="680000002800310f00"/20, @ANYRES32=r3, @ANYBLOB="00000000045eb690b8ec354b6fcd8b2610004ff7cfffff000000000a0001006261736d630100003800020034000300300000000b0001006d6972720500000000000000000006000c00abff00000000000000005ac919d246b303b4ac95b4382a41c0c734f28506eaa12a2a82325ac07e0bc5690ca6ecf70c5b43d0102b230cb9578b313b4b49bd344f5f1a6a26d85d1b510e8ba6487fc2e1910c71bc9ed12694bc76975ff9e54fe89df0df5f499bf0dd083e650cb73d18c27979d9c4ac5ad15911c2090ea17088d91fc5879e9ac3ce0b77d28b28eede074139eb7d4a54aaad6263da14daeba8c3bff0df46ccac00"/252], 0x68}}, 0x0) 07:00:54 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x80, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142, 0x8e}, {&(0x7f0000000180)=""/145, 0x91}, {&(0x7f00000002c0)=""/80, 0x50}, {&(0x7f0000000340)=""/126, 0x7e}, {&(0x7f0000000400)=""/130, 0x82}, {0x0}], 0x6, &(0x7f0000000240)=""/16, 0x10}}], 0x2, 0x0, 0x0) [ 188.143763][T13503] FAULT_INJECTION: forcing a failure. [ 188.143763][T13503] name failslab, interval 1, probability 0, space 0, times 0 [ 188.144135][T13499] loop5: p2 < > p3 p4 < > [ 188.160866][T13499] loop5: partition table partially beyond EOD, truncated [ 188.189015][T13499] loop5: p3 start 4276224225 is beyond EOD, truncated [ 188.196742][T13503] CPU: 0 PID: 13503 Comm: syz-executor.3 Not tainted 5.9.0-rc4-syzkaller #0 [ 188.205404][T13503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 188.215446][T13503] Call Trace: [ 188.218729][T13503] dump_stack+0x10f/0x19d [ 188.223050][T13503] should_fail+0x23c/0x250 [ 188.227460][T13503] __should_failslab+0x81/0x90 [ 188.232213][T13503] should_failslab+0x5/0x20 [ 188.236725][T13503] slab_pre_alloc_hook+0x20/0xd0 [ 188.241648][T13503] ? tomoyo_encode2+0x1e2/0x350 [ 188.246492][T13503] __kmalloc+0x78/0x310 [ 188.250634][T13503] ? tomoyo_encode2+0x1e2/0x350 [ 188.255471][T13503] tomoyo_encode2+0x1e2/0x350 [ 188.260138][T13503] tomoyo_realpath_from_path+0x36e/0x3c0 [ 188.265763][T13503] tomoyo_path_number_perm+0xc1/0x2d0 [ 188.271130][T13503] ? putname+0xa5/0xc0 [ 188.275255][T13503] ? __rcu_read_unlock+0x4b/0x260 [ 188.280269][T13503] tomoyo_file_ioctl+0x1c/0x20 [ 188.285025][T13503] security_file_ioctl+0x45/0x90 [ 188.289953][T13503] __se_sys_ioctl+0x48/0x140 [ 188.294539][T13503] __x64_sys_ioctl+0x3f/0x50 [ 188.299157][T13503] do_syscall_64+0x39/0x80 [ 188.303569][T13503] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 188.309465][T13503] RIP: 0033:0x45d427 [ 188.313346][T13503] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 bd b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 188.332935][T13503] RSP: 002b:00007fd2c87e4998 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 188.341364][T13503] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045d427 [ 188.349323][T13503] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 188.357277][T13503] RBP: 0000000000000000 R08: 0000000020000098 R09: 0000000000000000 [ 188.365312][T13503] R10: 00000000000001c0 R11: 0000000000000246 R12: 0000000000000001 [ 188.373272][T13503] R13: 0000000000000004 R14: 0000000000000004 R15: 00000000200000a8 [ 188.400734][T13503] ERROR: Out of memory at tomoyo_realpath_from_path. [ 188.497068][T13503] loop3: p2 < > p3 p4 < > [ 188.503878][T13503] loop3: partition table partially beyond EOD, truncated [ 188.511054][T13503] loop3: p2 start 25 is beyond EOD, truncated [ 188.518109][T13503] loop3: p3 start 4276224225 is beyond EOD, truncated [ 188.526655][T13503] loop3: p4 size 2 extends beyond EOD, truncated [ 188.548980][T13499] loop5: p2 < > p3 p4 < > [ 188.553422][T13499] loop5: partition table partially beyond EOD, truncated [ 188.563255][T13499] loop5: p3 start 4276224225 is beyond EOD, truncated 07:00:55 executing program 5: syz_read_part_table(0x40000110, 0x1, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff0a0000010000000000ffffff8500e931190000000000000680ffffff82000000e100e2fe87770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 07:00:55 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) 07:00:55 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = syz_io_uring_setup(0x76d1, &(0x7f0000000040), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x1, 0x0, 0x0, 0x0, 0x4000) 07:00:55 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/19, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="680000002800310f00"/20, @ANYRES32=r3, @ANYBLOB="00000000045eb690b8ec354b6fcd8b2610004ff7cfffff000000000a0001006261736d630100003800020034000300300000000b0001006d6972720500000000000000000006000c00abff00000000000000005ac919d246b303b4ac95b4382a41c0c734f28506eaa12a2a82325ac07e0bc5690ca6ecf70c5b43d0102b230cb9578b313b4b49bd344f5f1a6a26d85d1b510e8ba6487fc2e1910c71bc9ed12694bc76975ff9e54fe89df0df5f499bf0dd083e650cb73d18c27979d9c4ac5ad15911c2090ea17088d91fc5879e9ac3ce0b77d28b28eede074139eb7d4a54aaad6263da14daeba8c3bff0df46ccac00"/252], 0x68}}, 0x0) 07:00:55 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x80, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142, 0x8e}, {&(0x7f0000000180)=""/145, 0x91}, {&(0x7f00000002c0)=""/80, 0x50}, {&(0x7f0000000340)=""/126, 0x7e}, {&(0x7f00000004c0)=""/149, 0x95}], 0x5, &(0x7f0000000240)=""/16, 0x10}}], 0x2, 0x0, 0x0) 07:00:55 executing program 3 (fault-call:0 fault-nth:15): syz_read_part_table(0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff0a0000010000000000ffffff8500e931190000000000000680ffffff82000000e100e2fe87770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 07:00:55 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x80, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142, 0x8e}, {&(0x7f0000000180)=""/145, 0x91}, {&(0x7f00000002c0)=""/80, 0x50}, {&(0x7f0000000340)=""/126, 0x7e}, {&(0x7f00000004c0)=""/149, 0x95}], 0x5, &(0x7f0000000240)=""/16, 0x10}}], 0x2, 0x0, 0x0) 07:00:55 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) [ 188.685377][T13554] __nla_validate_parse: 22 callbacks suppressed [ 188.685386][T13554] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 188.704849][T13551] FAULT_INJECTION: forcing a failure. [ 188.704849][T13551] name failslab, interval 1, probability 0, space 0, times 0 [ 188.719377][T13554] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.2'. 07:00:55 executing program 2: socket$netlink(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="680000002800310f00"/20, @ANYRES32=r2, @ANYBLOB="00000000045eb690b8ec354b6fcd8b2610004ff7cfffff000000000a0001006261736d630100003800020034000300300000000b0001006d6972720500000000000000000006000c00abff00000000000000005ac919d246b303b4ac95b4382a41c0c734f28506eaa12a2a82325ac07e0bc5690ca6ecf70c5b43d0102b230cb9578b313b4b49bd344f5f1a6a26d85d1b510e8ba6487fc2e1910c71bc9ed12694bc76975ff9e54fe89df0df5f499bf0dd083e650cb73d18c27979d9c4ac5ad15911c2090ea17088d91fc5879e9ac3ce0b77d28b28eede074139eb7d4a54aaad6263da14daeba8c3bff0df46ccac00"/252], 0x68}}, 0x0) [ 188.724772][T13551] CPU: 1 PID: 13551 Comm: syz-executor.3 Not tainted 5.9.0-rc4-syzkaller #0 [ 188.737307][T13551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 188.747378][T13551] Call Trace: [ 188.750668][T13551] dump_stack+0x10f/0x19d [ 188.754983][T13551] should_fail+0x23c/0x250 [ 188.759432][T13551] __should_failslab+0x81/0x90 [ 188.764205][T13551] should_failslab+0x5/0x20 [ 188.768677][T13551] slab_pre_alloc_hook+0x20/0xd0 [ 188.773588][T13551] ? loop_set_status_from_info+0x3a0/0x3a0 [ 188.779367][T13551] kmem_cache_alloc_trace+0x54/0x2d0 [ 188.784623][T13551] ? __kthread_create_on_node+0x7a/0x270 [ 188.790224][T13551] ? loop_set_status_from_info+0x3a0/0x3a0 [ 188.796000][T13551] __kthread_create_on_node+0x7a/0x270 [ 188.801521][T13551] ? __blkdev_get+0x9f1/0xe30 [ 188.806240][T13551] ? widen_string+0x3a/0x280 [ 188.810818][T13551] ? loop_set_status_from_info+0x3a0/0x3a0 [ 188.816594][T13551] kthread_create_on_node+0x72/0xa0 [ 188.821783][T13551] loop_configure+0x55f/0xc70 [ 188.826432][T13551] lo_ioctl+0x554/0x1190 [ 188.830649][T13551] ? blkdev_common_ioctl+0xaae/0x10b0 [ 188.835989][T13551] ? putname+0xa5/0xc0 [ 188.840139][T13551] ? lo_release+0x130/0x130 [ 188.844616][T13551] blkdev_ioctl+0x1cf/0x410 [ 188.849152][T13551] block_ioctl+0x6d/0x80 [ 188.853372][T13551] ? blkdev_iopoll+0x80/0x80 [ 188.857957][T13551] __se_sys_ioctl+0xcb/0x140 [ 188.862527][T13551] __x64_sys_ioctl+0x3f/0x50 [ 188.867181][T13551] do_syscall_64+0x39/0x80 [ 188.871587][T13551] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 188.877459][T13551] RIP: 0033:0x45d427 [ 188.881338][T13551] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 bd b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 188.900913][T13551] RSP: 002b:00007fd2c87e4998 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 188.909337][T13551] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045d427 [ 188.917283][T13551] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 188.925223][T13551] RBP: 0000000000000000 R08: 0000000020000098 R09: 0000000000000000 [ 188.933170][T13551] R10: 00000000000001c0 R11: 0000000000000246 R12: 0000000000000001 [ 188.941193][T13551] R13: 0000000000000004 R14: 0000000000000004 R15: 00000000200000a8 07:00:55 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = syz_io_uring_setup(0x76d1, &(0x7f0000000040), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x1, 0x0, 0x0, 0x0, 0x800000) 07:00:55 executing program 3 (fault-call:0 fault-nth:16): syz_read_part_table(0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff0a0000010000000000ffffff8500e931190000000000000680ffffff82000000e100e2fe87770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 07:00:55 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) [ 188.993700][T13573] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 189.032175][T13573] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.2'. [ 189.069181][T13574] loop5: p2 < > p3 p4 < > [ 189.077373][T13574] loop5: partition table partially beyond EOD, truncated [ 189.098483][T13574] loop5: p3 start 4276224225 is beyond EOD, truncated [ 189.107307][T13591] FAULT_INJECTION: forcing a failure. [ 189.107307][T13591] name failslab, interval 1, probability 0, space 0, times 0 [ 189.136573][T13591] CPU: 1 PID: 13591 Comm: syz-executor.3 Not tainted 5.9.0-rc4-syzkaller #0 [ 189.145257][T13591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 189.155292][T13591] Call Trace: [ 189.158605][T13591] dump_stack+0x10f/0x19d [ 189.162979][T13591] should_fail+0x23c/0x250 [ 189.167368][T13591] __should_failslab+0x81/0x90 [ 189.172122][T13591] should_failslab+0x5/0x20 [ 189.176616][T13591] slab_pre_alloc_hook+0x20/0xd0 [ 189.181542][T13591] kmem_cache_alloc+0x4f/0x2d0 [ 189.186296][T13591] ? __kernfs_new_node+0x6a/0x340 [ 189.191295][T13591] __kernfs_new_node+0x6a/0x340 [ 189.196118][T13591] ? update_load_avg+0x1ad/0x2d0 [ 189.201028][T13591] kernfs_create_dir_ns+0x5e/0x140 [ 189.206109][T13591] internal_create_group+0x12f/0x890 [ 189.211374][T13591] sysfs_create_group+0x1b/0x20 [ 189.216207][T13591] loop_configure+0x97c/0xc70 [ 189.220872][T13591] lo_ioctl+0x554/0x1190 [ 189.225131][T13591] ? blkdev_common_ioctl+0xaae/0x10b0 [ 189.230471][T13591] ? putname+0xa5/0xc0 [ 189.234512][T13591] ? lo_release+0x130/0x130 [ 189.238983][T13591] blkdev_ioctl+0x1cf/0x410 [ 189.243455][T13591] block_ioctl+0x6d/0x80 [ 189.247728][T13591] ? blkdev_iopoll+0x80/0x80 [ 189.252304][T13591] __se_sys_ioctl+0xcb/0x140 [ 189.256868][T13591] __x64_sys_ioctl+0x3f/0x50 [ 189.261461][T13591] do_syscall_64+0x39/0x80 [ 189.265869][T13591] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 189.271742][T13591] RIP: 0033:0x45d427 [ 189.275632][T13591] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 bd b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 189.295223][T13591] RSP: 002b:00007fd2c87e4998 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 189.303615][T13591] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045d427 [ 189.311566][T13591] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 189.319528][T13591] RBP: 0000000000000000 R08: 0000000020000098 R09: 0000000000000000 [ 189.328694][T13591] R10: 00000000000001c0 R11: 0000000000000246 R12: 0000000000000001 [ 189.336657][T13591] R13: 0000000000000004 R14: 0000000000000004 R15: 00000000200000a8 [ 189.357634][ T5086] loop5: p2 < > p3 p4 < > [ 189.365444][ T5086] loop5: partition table partially beyond EOD, truncated [ 189.373940][ T5086] loop5: p3 start 4276224225 is beyond EOD, truncated [ 189.412149][T13591] loop3: p2 < > p3 p4 < > [ 189.416564][T13591] loop3: partition table partially beyond EOD, truncated [ 189.424990][T13591] loop3: p2 start 25 is beyond EOD, truncated [ 189.431088][T13591] loop3: p3 start 4276224225 is beyond EOD, truncated [ 189.438001][T13591] loop3: p4 size 2 extends beyond EOD, truncated 07:00:55 executing program 5: syz_read_part_table(0x40000300, 0x1, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff0a0000010000000000ffffff8500e931190000000000000680ffffff82000000e100e2fe87770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 07:00:55 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x80, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142, 0x8e}, {&(0x7f0000000180)=""/145, 0x91}, {&(0x7f00000002c0)=""/80, 0x50}, {&(0x7f0000000340)=""/126, 0x7e}, {&(0x7f00000004c0)=""/149, 0x95}], 0x5, &(0x7f0000000240)=""/16, 0x10}}], 0x2, 0x0, 0x0) 07:00:55 executing program 2: socket$netlink(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="680000002800310f00"/20, @ANYRES32=r2, @ANYBLOB="00000000045eb690b8ec354b6fcd8b2610004ff7cfffff000000000a0001006261736d630100003800020034000300300000000b0001006d6972720500000000000000000006000c00abff00000000000000005ac919d246b303b4ac95b4382a41c0c734f28506eaa12a2a82325ac07e0bc5690ca6ecf70c5b43d0102b230cb9578b313b4b49bd344f5f1a6a26d85d1b510e8ba6487fc2e1910c71bc9ed12694bc76975ff9e54fe89df0df5f499bf0dd083e650cb73d18c27979d9c4ac5ad15911c2090ea17088d91fc5879e9ac3ce0b77d28b28eede074139eb7d4a54aaad6263da14daeba8c3bff0df46ccac00"/252], 0x68}}, 0x0) 07:00:55 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = syz_io_uring_setup(0x76d1, &(0x7f0000000040), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x1, 0x0, 0x0, 0x0, 0x3000000) 07:00:55 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) 07:00:56 executing program 3 (fault-call:0 fault-nth:17): syz_read_part_table(0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff0a0000010000000000ffffff8500e931190000000000000680ffffff82000000e100e2fe87770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 07:00:56 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) 07:00:56 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x80, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142, 0x8e}, {&(0x7f0000000180)=""/145, 0x91}, {&(0x7f00000002c0)=""/80, 0x50}, {&(0x7f0000000340)=""/126, 0x7e}, {0x0}, {&(0x7f00000004c0)=""/149, 0x95}], 0x6, &(0x7f0000000240)=""/16, 0x10}}], 0x2, 0x0, 0x0) [ 189.576556][T13623] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 189.600346][T13623] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.2'. [ 189.622607][T13625] loop5: p2 < > p3 p4 < > 07:00:56 executing program 2: socket$netlink(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="680000002800310f00"/20, @ANYRES32=r2, @ANYBLOB="00000000045eb690b8ec354b6fcd8b2610004ff7cfffff000000000a0001006261736d630100003800020034000300300000000b0001006d6972720500000000000000000006000c00abff00000000000000005ac919d246b303b4ac95b4382a41c0c734f28506eaa12a2a82325ac07e0bc5690ca6ecf70c5b43d0102b230cb9578b313b4b49bd344f5f1a6a26d85d1b510e8ba6487fc2e1910c71bc9ed12694bc76975ff9e54fe89df0df5f499bf0dd083e650cb73d18c27979d9c4ac5ad15911c2090ea17088d91fc5879e9ac3ce0b77d28b28eede074139eb7d4a54aaad6263da14daeba8c3bff0df46ccac00"/252], 0x68}}, 0x0) 07:00:56 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = syz_io_uring_setup(0x76d1, &(0x7f0000000040), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x1, 0x0, 0x0, 0x0, 0x40000000) [ 189.627163][T13625] loop5: partition table partially beyond EOD, truncated [ 189.635240][T13628] FAULT_INJECTION: forcing a failure. [ 189.635240][T13628] name failslab, interval 1, probability 0, space 0, times 0 [ 189.649922][T13628] CPU: 1 PID: 13628 Comm: syz-executor.3 Not tainted 5.9.0-rc4-syzkaller #0 [ 189.658652][T13628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 189.662027][T13625] loop5: p3 start 4276224225 is beyond EOD, truncated [ 189.668697][T13628] Call Trace: [ 189.678737][T13628] dump_stack+0x10f/0x19d [ 189.683100][T13628] should_fail+0x23c/0x250 [ 189.687544][T13628] __should_failslab+0x81/0x90 [ 189.692332][T13628] should_failslab+0x5/0x20 [ 189.696851][T13628] slab_pre_alloc_hook+0x20/0xd0 [ 189.701911][T13628] kmem_cache_alloc+0x4f/0x2d0 [ 189.706666][T13628] ? __kernfs_new_node+0x6a/0x340 [ 189.711689][T13628] __kernfs_new_node+0x6a/0x340 [ 189.716622][T13628] ? idr_alloc_cyclic+0x243/0x2d0 [ 189.721618][T13628] ? bpf_lsm_kernfs_init_security+0x5/0x10 [ 189.727549][T13628] ? rb_insert_color+0x7e/0x310 [ 189.732402][T13628] kernfs_new_node+0x5b/0xd0 [ 189.736965][T13628] __kernfs_create_file+0x45/0x1a0 [ 189.742048][T13628] sysfs_add_file_mode_ns+0x1c1/0x250 [ 189.747415][T13628] internal_create_group+0x2f4/0x890 [ 189.752815][T13628] sysfs_create_group+0x1b/0x20 [ 189.757647][T13628] loop_configure+0x97c/0xc70 [ 189.762306][T13628] lo_ioctl+0x554/0x1190 [ 189.766523][T13628] ? blkdev_common_ioctl+0xaae/0x10b0 [ 189.771875][T13628] ? putname+0xa5/0xc0 [ 189.775930][T13628] ? lo_release+0x130/0x130 [ 189.780404][T13628] blkdev_ioctl+0x1cf/0x410 [ 189.784918][T13628] block_ioctl+0x6d/0x80 [ 189.789167][T13628] ? blkdev_iopoll+0x80/0x80 [ 189.793742][T13628] __se_sys_ioctl+0xcb/0x140 [ 189.798317][T13628] __x64_sys_ioctl+0x3f/0x50 [ 189.802877][T13628] do_syscall_64+0x39/0x80 [ 189.807345][T13628] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 189.813309][T13628] RIP: 0033:0x45d427 [ 189.817180][T13628] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 bd b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 189.836753][T13628] RSP: 002b:00007fd2c87e4998 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 189.845139][T13628] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045d427 [ 189.853084][T13628] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 189.861039][T13628] RBP: 0000000000000000 R08: 0000000020000098 R09: 0000000000000000 [ 189.869028][T13628] R10: 00000000000001c0 R11: 0000000000000246 R12: 0000000000000001 07:00:56 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) [ 189.876970][T13628] R13: 0000000000000004 R14: 0000000000000004 R15: 00000000200000a8 [ 189.937673][T13628] loop3: p2 < > p3 p4 < > [ 189.942187][T13628] loop3: partition table partially beyond EOD, truncated [ 189.957909][T13628] loop3: p2 start 25 is beyond EOD, truncated [ 189.962300][T13652] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 189.964459][T13628] loop3: p3 start 4276224225 is beyond EOD, truncated 07:00:56 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = syz_io_uring_setup(0x76d1, &(0x7f0000000040), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x1, 0x0, 0x0, 0x0, 0xeffdffff) [ 189.999217][T13628] loop3: p4 size 2 extends beyond EOD, truncated [ 190.043068][T13668] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.2'. [ 190.062018][T13625] loop5: p2 < > p3 p4 < > [ 190.066434][T13625] loop5: partition table partially beyond EOD, truncated [ 190.088748][T13625] loop5: p3 start 4276224225 is beyond EOD, truncated 07:00:56 executing program 5: syz_read_part_table(0x40000500, 0x1, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff0a0000010000000000ffffff8500e931190000000000000680ffffff82000000e100e2fe87770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 07:00:56 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x80, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142, 0x8e}, {&(0x7f0000000180)=""/145, 0x91}, {&(0x7f00000002c0)=""/80, 0x50}, {&(0x7f0000000340)=""/126, 0x7e}, {0x0}, {&(0x7f00000004c0)=""/149, 0x95}], 0x6, &(0x7f0000000240)=""/16, 0x10}}], 0x2, 0x0, 0x0) 07:00:56 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) 07:00:56 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="680000002800310f00"/20, @ANYRES32=r3, @ANYBLOB="00000000045eb690b8ec354b6fcd8b2610004ff7cfffff000000000a0001006261736d630100003800020034000300300000000b0001006d6972720500000000000000000006000c00abff00000000000000005ac919d246b303b4ac95b4382a41c0c734f28506eaa12a2a82325ac07e0bc5690ca6ecf70c5b43d0102b230cb9578b313b4b49bd344f5f1a6a26d85d1b510e8ba6487fc2e1910c71bc9ed12694bc76975ff9e54fe89df0df5f499bf0dd083e650cb73d18c27979d9c4ac5ad15911c2090ea17088d91fc5879e9ac3ce0b77d28b28eede074139eb7d4a54aaad6263da14daeba8c3bff0df46ccac00"/252], 0x68}}, 0x0) 07:00:56 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = syz_io_uring_setup(0x76d1, &(0x7f0000000040), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x1, 0x0, 0x0, 0x0, 0xf5ffffff) 07:00:56 executing program 3 (fault-call:0 fault-nth:18): syz_read_part_table(0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff0a0000010000000000ffffff8500e931190000000000000680ffffff82000000e100e2fe87770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) [ 190.116339][ T5086] loop5: p2 < > p3 p4 < > [ 190.120851][ T5086] loop5: partition table partially beyond EOD, truncated [ 190.135828][ T5086] loop5: p3 start 4276224225 is beyond EOD, truncated 07:00:56 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) 07:00:56 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x80, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142, 0x8e}, {&(0x7f0000000180)=""/145, 0x91}, {&(0x7f00000002c0)=""/80, 0x50}, {&(0x7f0000000340)=""/126, 0x7e}, {0x0}, {&(0x7f00000004c0)=""/149, 0x95}], 0x6, &(0x7f0000000240)=""/16, 0x10}}], 0x2, 0x0, 0x0) [ 190.207552][T13708] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 190.222614][T13706] FAULT_INJECTION: forcing a failure. [ 190.222614][T13706] name failslab, interval 1, probability 0, space 0, times 0 07:00:56 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = syz_io_uring_setup(0x76d1, &(0x7f0000000040), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x1, 0x0, 0x0, 0x0, 0xfffffdef) [ 190.249539][T13706] CPU: 1 PID: 13706 Comm: syz-executor.3 Not tainted 5.9.0-rc4-syzkaller #0 [ 190.258211][T13706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 190.267546][T13726] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.2'. [ 190.268247][T13706] Call Trace: [ 190.268266][T13706] dump_stack+0x10f/0x19d [ 190.268285][T13706] should_fail+0x23c/0x250 [ 190.289492][T13706] __should_failslab+0x81/0x90 [ 190.294244][T13706] should_failslab+0x5/0x20 [ 190.298736][T13706] slab_pre_alloc_hook+0x20/0xd0 [ 190.303664][T13706] kmem_cache_alloc+0x4f/0x2d0 [ 190.308505][T13706] ? __kernfs_new_node+0x6a/0x340 [ 190.313515][T13706] __kernfs_new_node+0x6a/0x340 [ 190.318395][T13706] ? kernfs_link_sibling+0x227/0x240 [ 190.323674][T13706] kernfs_new_node+0x5b/0xd0 [ 190.328236][T13706] __kernfs_create_file+0x45/0x1a0 [ 190.333318][T13706] sysfs_add_file_mode_ns+0x1c1/0x250 [ 190.338676][T13706] internal_create_group+0x2f4/0x890 [ 190.343947][T13706] sysfs_create_group+0x1b/0x20 [ 190.348783][T13706] loop_configure+0x97c/0xc70 [ 190.353472][T13706] lo_ioctl+0x554/0x1190 [ 190.357703][T13706] ? blkdev_common_ioctl+0xaae/0x10b0 [ 190.363044][T13706] ? putname+0xa5/0xc0 [ 190.367179][T13706] ? lo_release+0x130/0x130 [ 190.371658][T13706] blkdev_ioctl+0x1cf/0x410 [ 190.376146][T13706] block_ioctl+0x6d/0x80 [ 190.380369][T13706] ? blkdev_iopoll+0x80/0x80 [ 190.384945][T13706] __se_sys_ioctl+0xcb/0x140 [ 190.389513][T13706] __x64_sys_ioctl+0x3f/0x50 [ 190.394075][T13706] do_syscall_64+0x39/0x80 [ 190.398466][T13706] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 190.405284][T13706] RIP: 0033:0x45d427 [ 190.409200][T13706] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 bd b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 190.428790][T13706] RSP: 002b:00007fd2c87e4998 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 190.437216][T13706] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045d427 [ 190.445161][T13706] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 07:00:56 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="680000002800310f00"/20, @ANYRES32=r3, @ANYBLOB="00000000045eb690b8ec354b6fcd8b2610004ff7cfffff000000000a0001006261736d630100003800020034000300300000000b0001006d6972720500000000000000000006000c00abff00000000000000005ac919d246b303b4ac95b4382a41c0c734f28506eaa12a2a82325ac07e0bc5690ca6ecf70c5b43d0102b230cb9578b313b4b49bd344f5f1a6a26d85d1b510e8ba6487fc2e1910c71bc9ed12694bc76975ff9e54fe89df0df5f499bf0dd083e650cb73d18c27979d9c4ac5ad15911c2090ea17088d91fc5879e9ac3ce0b77d28b28eede074139eb7d4a54aaad6263da14daeba8c3bff0df46ccac00"/252], 0x68}}, 0x0) 07:00:56 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00'], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) [ 190.453117][T13706] RBP: 0000000000000000 R08: 0000000020000098 R09: 0000000000000000 [ 190.461073][T13706] R10: 00000000000001c0 R11: 0000000000000246 R12: 0000000000000001 [ 190.469049][T13706] R13: 0000000000000004 R14: 0000000000000004 R15: 00000000200000a8 [ 190.524071][T13706] loop3: p2 < > p3 p4 < > [ 190.528492][T13706] loop3: partition table partially beyond EOD, truncated [ 190.544799][T13706] loop3: p2 start 25 is beyond EOD, truncated [ 190.555403][T13706] loop3: p3 start 4276224225 is beyond EOD, truncated [ 190.570457][T13706] loop3: p4 size 2 extends beyond EOD, truncated 07:00:57 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00'], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) [ 190.602258][T13733] loop5: p2 < > p3 p4 < > [ 190.606893][T13733] loop5: partition table partially beyond EOD, truncated [ 190.617685][T13733] loop5: p3 start 4276224225 is beyond EOD, truncated 07:00:57 executing program 5: syz_read_part_table(0x40000600, 0x1, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff0a0000010000000000ffffff8500e931190000000000000680ffffff82000000e100e2fe87770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 07:00:57 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="680000002800310f00"/20, @ANYRES32=r3, @ANYBLOB="00000000045eb690b8ec354b6fcd8b2610004ff7cfffff000000000a0001006261736d630100003800020034000300300000000b0001006d6972720500000000000000000006000c00abff00000000000000005ac919d246b303b4ac95b4382a41c0c734f28506eaa12a2a82325ac07e0bc5690ca6ecf70c5b43d0102b230cb9578b313b4b49bd344f5f1a6a26d85d1b510e8ba6487fc2e1910c71bc9ed12694bc76975ff9e54fe89df0df5f499bf0dd083e650cb73d18c27979d9c4ac5ad15911c2090ea17088d91fc5879e9ac3ce0b77d28b28eede074139eb7d4a54aaad6263da14daeba8c3bff0df46ccac00"/252], 0x68}}, 0x0) 07:00:57 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x80, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142, 0x8e}, {&(0x7f0000000180)=""/145, 0x91}, {&(0x7f00000002c0)=""/80, 0x50}, {&(0x7f0000000400)=""/130, 0x82}, {&(0x7f00000004c0)=""/149, 0x95}], 0x5, &(0x7f0000000240)=""/16, 0x10}}], 0x2, 0x0, 0x0) 07:00:57 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00'], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) 07:00:57 executing program 3 (fault-call:0 fault-nth:19): syz_read_part_table(0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff0a0000010000000000ffffff8500e931190000000000000680ffffff82000000e100e2fe87770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 07:00:57 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = syz_io_uring_setup(0x76d1, &(0x7f0000000040), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x1, 0x0, 0x0, 0x0, 0xfffffff5) [ 190.746187][T13733] loop5: p2 < > p3 p4 < > [ 190.752518][T13733] loop5: partition table partially beyond EOD, truncated [ 190.760661][T13733] loop5: p3 start 4276224225 is beyond EOD, truncated [ 190.770429][ T5086] loop5: p2 < > p3 p4 < > [ 190.775276][ T5086] loop5: partition table partially beyond EOD, truncated [ 190.800197][ T5086] loop5: p3 start 4276224225 is beyond EOD, truncated 07:00:57 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c0001"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) 07:00:57 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x80, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142, 0x8e}, {&(0x7f0000000180)=""/145, 0x91}, {&(0x7f00000002c0)=""/80, 0x50}, {&(0x7f0000000400)=""/130, 0x82}, {&(0x7f00000004c0)=""/149, 0x95}], 0x5, &(0x7f0000000240)=""/16, 0x10}}], 0x2, 0x0, 0x0) [ 190.852471][T13793] FAULT_INJECTION: forcing a failure. [ 190.852471][T13793] name failslab, interval 1, probability 0, space 0, times 0 07:00:57 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = syz_io_uring_setup(0x76d1, &(0x7f0000000040), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x1, 0x0, 0x0, 0x0, 0x10000000000) 07:00:57 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="680000002800310f00"/20, @ANYRES32=r3, @ANYBLOB="00000000045eb690b8ec354b6fcd8b2610004ff7cfffff000000000a0001006261736d630100003800020034000300300000000b0001006d6972720500000000000000000006000c00abff00000000000000005ac919d246b303b4ac95b4382a41c0c734f28506eaa12a2a82325ac07e0bc5690ca6ecf70c5b43d0102b230cb9578b313b4b49bd344f5f1a6a26d85d1b510e8ba6487fc2e1910c71bc9ed12694bc76975ff9e54fe89df0df5f499bf0dd083e650cb73d18c27979d9c4ac5ad15911c2090ea17088d91fc5879e9ac3ce0b77d28b28eede074139eb7d4a54aaad6263da14daeba8c3bff0df46ccac00"/252], 0x68}}, 0x0) [ 190.909295][T13793] CPU: 1 PID: 13793 Comm: syz-executor.3 Not tainted 5.9.0-rc4-syzkaller #0 [ 190.917968][T13793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 190.928048][T13793] Call Trace: [ 190.931338][T13793] dump_stack+0x10f/0x19d [ 190.935639][T13793] should_fail+0x23c/0x250 [ 190.940066][T13793] __should_failslab+0x81/0x90 [ 190.945213][T13793] should_failslab+0x5/0x20 [ 190.949743][T13793] slab_pre_alloc_hook+0x20/0xd0 [ 190.954711][T13793] kmem_cache_alloc+0x4f/0x2d0 [ 190.959467][T13793] ? __kernfs_new_node+0x6a/0x340 [ 190.964498][T13793] __kernfs_new_node+0x6a/0x340 [ 190.969349][T13793] ? kernfs_link_sibling+0x227/0x240 [ 190.974657][T13793] ? bpf_lsm_kernfs_init_security+0x5/0x10 [ 190.980445][T13793] ? rb_insert_color+0x7e/0x310 [ 190.985382][T13793] kernfs_new_node+0x5b/0xd0 [ 190.989944][T13793] __kernfs_create_file+0x45/0x1a0 [ 190.995024][T13793] sysfs_add_file_mode_ns+0x1c1/0x250 [ 191.000366][T13793] internal_create_group+0x2f4/0x890 [ 191.005634][T13793] sysfs_create_group+0x1b/0x20 [ 191.010454][T13793] loop_configure+0x97c/0xc70 [ 191.015127][T13793] lo_ioctl+0x554/0x1190 [ 191.019345][T13793] ? blkdev_common_ioctl+0xaae/0x10b0 [ 191.024688][T13793] ? putname+0xa5/0xc0 [ 191.028740][T13793] ? lo_release+0x130/0x130 [ 191.033212][T13793] blkdev_ioctl+0x1cf/0x410 [ 191.037686][T13793] block_ioctl+0x6d/0x80 [ 191.041905][T13793] ? blkdev_iopoll+0x80/0x80 [ 191.046492][T13793] __se_sys_ioctl+0xcb/0x140 [ 191.051067][T13793] __x64_sys_ioctl+0x3f/0x50 [ 191.055629][T13793] do_syscall_64+0x39/0x80 [ 191.060020][T13793] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 191.065885][T13793] RIP: 0033:0x45d427 [ 191.069793][T13793] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 bd b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 191.089366][T13793] RSP: 002b:00007fd2c87e4998 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 191.097797][T13793] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045d427 [ 191.105739][T13793] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 191.113680][T13793] RBP: 0000000000000000 R08: 0000000020000098 R09: 0000000000000000 [ 191.121621][T13793] R10: 00000000000001c0 R11: 0000000000000246 R12: 0000000000000001 [ 191.129576][T13793] R13: 0000000000000004 R14: 0000000000000004 R15: 00000000200000a8 07:00:57 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x80, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142, 0x8e}, {&(0x7f0000000180)=""/145, 0x91}, {&(0x7f00000002c0)=""/80, 0x50}, {&(0x7f0000000400)=""/130, 0x82}, {&(0x7f00000004c0)=""/149, 0x95}], 0x5, &(0x7f0000000240)=""/16, 0x10}}], 0x2, 0x0, 0x0) [ 191.193424][T13793] loop3: p2 < > p3 p4 < > [ 191.197845][T13793] loop3: partition table partially beyond EOD, truncated [ 191.240013][T13793] loop3: p2 start 25 is beyond EOD, truncated [ 191.266934][T13800] loop5: p2 < > p3 p4 < > [ 191.271366][T13800] loop5: partition table partially beyond EOD, truncated 07:00:57 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c0001"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) [ 191.284722][T13800] loop5: p3 start 4276224225 is beyond EOD, truncated [ 191.287766][T13793] loop3: p3 start 4276224225 is beyond EOD, truncated [ 191.331949][T13793] loop3: p4 size 2 extends beyond EOD, truncated 07:00:57 executing program 5: syz_read_part_table(0x40000700, 0x1, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff0a0000010000000000ffffff8500e931190000000000000680ffffff82000000e100e2fe87770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 07:00:57 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x80, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142, 0x8e}, {&(0x7f0000000180)=""/145, 0x91}, {&(0x7f00000002c0)=""/80, 0x50}, {0x0}, {&(0x7f0000000400)=""/130, 0x82}, {&(0x7f00000004c0)=""/149, 0x95}], 0x6, &(0x7f0000000240)=""/16, 0x10}}], 0x2, 0x0, 0x0) 07:00:57 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="680000002800310f00"/20, @ANYRES32=r3, @ANYBLOB="00000000045eb690b8ec354b6fcd8b2610004ff7cfffff000000000a0001006261736d630100003800020034000300300000000b0001006d6972720500000000000000000006000c00abff00000000000000005ac919d246b303b4ac95b4382a41c0c734f28506eaa12a2a82325ac07e0bc5690ca6ecf70c5b43d0102b230cb9578b313b4b49bd344f5f1a6a26d85d1b510e8ba6487fc2e1910c71bc9ed12694bc76975ff9e54fe89df0df5f499bf0dd083e650cb73d18c27979d9c4ac5ad15911c2090ea17088d91fc5879e9ac3ce0b77d28b28eede074139eb7d4a54aaad6263da14daeba8c3bff0df46ccac00"/252], 0x68}}, 0x0) 07:00:57 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = syz_io_uring_setup(0x76d1, &(0x7f0000000040), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x1, 0x0, 0x0, 0x0, 0x80000000000000) 07:00:57 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c0001"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) 07:00:57 executing program 3 (fault-call:0 fault-nth:20): syz_read_part_table(0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff0a0000010000000000ffffff8500e931190000000000000680ffffff82000000e100e2fe87770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) [ 191.396656][T13800] loop5: p2 < > p3 p4 < > [ 191.403628][T13800] loop5: partition table partially beyond EOD, truncated [ 191.411208][T13800] loop5: p3 start 4276224225 is beyond EOD, truncated [ 191.420548][ T5086] loop5: p2 < > p3 p4 < > [ 191.425323][ T5086] loop5: partition table partially beyond EOD, truncated [ 191.435007][ T5086] loop5: p3 start 4276224225 is beyond EOD, truncated 07:00:57 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x80, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142, 0x8e}, {&(0x7f0000000180)=""/145, 0x91}, {&(0x7f00000002c0)=""/80, 0x50}, {0x0}, {&(0x7f0000000400)=""/130, 0x82}, {&(0x7f00000004c0)=""/149, 0x95}], 0x6, &(0x7f0000000240)=""/16, 0x10}}], 0x2, 0x0, 0x0) 07:00:57 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c0001007665"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) 07:00:58 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="680000002800310f00"/20, @ANYRES32=r3, @ANYBLOB="00000000045eb690b8ec354b6fcd8b2610004ff7cfffff000000000a0001006261736d630100003800020034000300300000000b0001006d6972720500000000000000000006000c00abff00000000000000005ac919d246b303b4ac95b4382a41c0c734f28506eaa12a2a82325ac07e0bc5690ca6ecf70c5b43d0102b230cb9578b313b4b49bd344f5f1a6a26d85d1b510e8ba6487fc2e1910c71bc9ed12694bc76975ff9e54fe89df0df5f499bf0dd083e650cb73d18c27979d9c4ac5ad15911c2090ea17088d91fc5879e9ac3ce0b77d28b28eede074139eb7d4a54aaad6263da14daeba8c3bff0df46ccac00"/252], 0x68}}, 0x0) 07:00:58 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = syz_io_uring_setup(0x76d1, &(0x7f0000000040), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x1, 0x0, 0x0, 0x0, 0x300000000000000) 07:00:58 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x80, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142, 0x8e}, {&(0x7f0000000180)=""/145, 0x91}, {&(0x7f00000002c0)=""/80, 0x50}, {0x0}, {&(0x7f0000000400)=""/130, 0x82}, {&(0x7f00000004c0)=""/149, 0x95}], 0x6, &(0x7f0000000240)=""/16, 0x10}}], 0x2, 0x0, 0x0) [ 191.583622][T13865] FAULT_INJECTION: forcing a failure. [ 191.583622][T13865] name failslab, interval 1, probability 0, space 0, times 0 [ 191.598257][T13865] CPU: 0 PID: 13865 Comm: syz-executor.3 Not tainted 5.9.0-rc4-syzkaller #0 [ 191.607024][T13865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 191.617063][T13865] Call Trace: [ 191.620350][T13865] dump_stack+0x10f/0x19d [ 191.624684][T13865] should_fail+0x23c/0x250 [ 191.629101][T13865] __should_failslab+0x81/0x90 [ 191.633935][T13865] should_failslab+0x5/0x20 [ 191.638406][T13865] slab_pre_alloc_hook+0x20/0xd0 [ 191.643312][T13865] kmem_cache_alloc+0x4f/0x2d0 [ 191.648068][T13865] ? __kernfs_new_node+0x6a/0x340 [ 191.653063][T13865] __kernfs_new_node+0x6a/0x340 [ 191.657945][T13865] ? kernfs_link_sibling+0x227/0x240 [ 191.663200][T13865] kernfs_new_node+0x5b/0xd0 [ 191.667840][T13865] __kernfs_create_file+0x45/0x1a0 [ 191.672919][T13865] sysfs_add_file_mode_ns+0x1c1/0x250 [ 191.678285][T13865] internal_create_group+0x2f4/0x890 [ 191.683553][T13865] sysfs_create_group+0x1b/0x20 [ 191.688376][T13865] loop_configure+0x97c/0xc70 [ 191.693024][T13865] lo_ioctl+0x554/0x1190 [ 191.697241][T13865] ? blkdev_common_ioctl+0xaae/0x10b0 [ 191.702635][T13865] ? putname+0xa5/0xc0 [ 191.706672][T13865] ? lo_release+0x130/0x130 [ 191.711158][T13865] blkdev_ioctl+0x1cf/0x410 [ 191.715644][T13865] block_ioctl+0x6d/0x80 [ 191.719869][T13865] ? blkdev_iopoll+0x80/0x80 [ 191.724429][T13865] __se_sys_ioctl+0xcb/0x140 [ 191.729060][T13865] __x64_sys_ioctl+0x3f/0x50 [ 191.733633][T13865] do_syscall_64+0x39/0x80 [ 191.738042][T13865] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 191.743901][T13865] RIP: 0033:0x45d427 [ 191.747767][T13865] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 bd b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 191.767354][T13865] RSP: 002b:00007fd2c87e4998 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 191.775735][T13865] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045d427 [ 191.783693][T13865] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 191.791698][T13865] RBP: 0000000000000000 R08: 0000000020000098 R09: 0000000000000000 [ 191.799653][T13865] R10: 00000000000001c0 R11: 0000000000000246 R12: 0000000000000001 [ 191.807700][T13865] R13: 0000000000000004 R14: 0000000000000004 R15: 00000000200000a8 07:00:58 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="680000002800310f00"/20, @ANYRES32=r3, @ANYBLOB="00000000045eb690b8ec354b6fcd8b2610004ff7cfffff000000000a0001006261736d630100003800020034000300300000000b0001006d6972720500000000000000000006000c00abff00000000000000005ac919d246b303b4ac95b4382a41c0c734f28506eaa12a2a82325ac07e0bc5690ca6ecf70c5b43d0102b230cb9578b313b4b49bd344f5f1a6a26d85d1b510e8ba6487fc2e1910c71bc9ed12694bc76975ff9e54fe89df0df5f499bf0dd083e650cb73d18c27979d9c4ac5ad15911c2090ea17088d91fc5879e9ac3ce0b77d28b28eede074139eb7d4a54aaad6263da14daeba8c3bff0df46ccac00"/252], 0x68}}, 0x0) [ 191.872208][T13865] loop3: p2 < > p3 p4 < > [ 191.876649][T13865] loop3: partition table partially beyond EOD, truncated [ 191.905413][T13865] loop3: p2 start 25 is beyond EOD, truncated [ 191.906860][T13892] loop5: p2 < > p3 p4 < > [ 191.916076][T13892] loop5: partition table partially beyond EOD, truncated [ 191.923760][T13892] loop5: p3 start 4276224225 is beyond EOD, truncated [ 191.949422][T13865] loop3: p3 start 4276224225 is beyond EOD, truncated [ 191.974327][T13865] loop3: p4 size 2 extends beyond EOD, truncated [ 192.002377][T13892] loop5: p2 < > p3 p4 < > [ 192.006838][T13892] loop5: partition table partially beyond EOD, truncated [ 192.014691][T13892] loop5: p3 start 4276224225 is beyond EOD, truncated 07:00:58 executing program 5: syz_read_part_table(0x40000802, 0x1, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff0a0000010000000000ffffff8500e931190000000000000680ffffff82000000e100e2fe87770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 07:00:58 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c000100"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) 07:00:58 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x80, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142, 0x8e}, {&(0x7f0000000180)=""/145, 0x91}, {&(0x7f0000000340)=""/126, 0x7e}, {&(0x7f0000000400)=""/130, 0x82}, {&(0x7f00000004c0)=""/149, 0x95}], 0x5, &(0x7f0000000240)=""/16, 0x10}}], 0x2, 0x0, 0x0) 07:00:58 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="680000002800310f00"/20, @ANYRES32=r3, @ANYBLOB="00000000045eb690b8ec354b6fcd8b2610004ff7cfffff000000000a0001006261736d630100003800020034000300300000000b0001006d6972720500000000000000000006000c00abff00000000000000005ac919d246b303b4ac95b4382a41c0c734f28506eaa12a2a82325ac07e0bc5690ca6ecf70c5b43d0102b230cb9578b313b4b49bd344f5f1a6a26d85d1b510e8ba6487fc2e1910c71bc9ed12694bc76975ff9e54fe89df0df5f499bf0dd083e650cb73d18c27979d9c4ac5ad15911c2090ea17088d91fc5879e9ac3ce0b77d28b28eede074139eb7d4a54aaad6263da14daeba8c3bff0df46ccac00"/252], 0x68}}, 0x0) 07:00:58 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = syz_io_uring_setup(0x76d1, &(0x7f0000000040), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x1, 0x0, 0x0, 0x0, 0x4000000000000000) 07:00:58 executing program 3 (fault-call:0 fault-nth:21): syz_read_part_table(0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff0a0000010000000000ffffff8500e931190000000000000680ffffff82000000e100e2fe87770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 07:00:58 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="680000002800310f00"/20, @ANYRES32=r3, @ANYBLOB="00000000045eb690b8ec354b6fcd8b2610004ff7cfffff000000000a0001006261736d630100003800020034000300300000000b0001006d6972720500000000000000000006000c00abff00000000000000005ac919d246b303b4ac95b4382a41c0c734f28506eaa12a2a82325ac07e0bc5690ca6ecf70c5b43d0102b230cb9578b313b4b49bd344f5f1a6a26d85d1b510e8ba6487fc2e1910c71bc9ed12694bc76975ff9e54fe89df0df5f499bf0dd083e650cb73d18c27979d9c4ac5ad15911c2090ea17088d91fc5879e9ac3ce0b77d28b28eede074139eb7d4a54aaad6263da14daeba8c3bff0df46ccac00"/252], 0x68}}, 0x0) [ 192.042879][ T5086] loop5: p2 < > p3 p4 < > [ 192.059564][ T5086] loop5: partition table partially beyond EOD, truncated [ 192.068017][ T5086] loop5: p3 start 4276224225 is beyond EOD, truncated 07:00:58 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x80, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142, 0x8e}, {&(0x7f0000000180)=""/145, 0x91}, {&(0x7f0000000340)=""/126, 0x7e}, {&(0x7f0000000400)=""/130, 0x82}, {&(0x7f00000004c0)=""/149, 0x95}], 0x5, &(0x7f0000000240)=""/16, 0x10}}], 0x2, 0x0, 0x0) 07:00:58 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c000100"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) [ 192.132164][T13950] FAULT_INJECTION: forcing a failure. [ 192.132164][T13950] name failslab, interval 1, probability 0, space 0, times 0 [ 192.165669][T13950] CPU: 0 PID: 13950 Comm: syz-executor.3 Not tainted 5.9.0-rc4-syzkaller #0 07:00:58 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = syz_io_uring_setup(0x76d1, &(0x7f0000000040), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x1, 0x0, 0x0, 0x0, 0xeffdffff00000000) [ 192.174340][T13950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 192.185055][T13950] Call Trace: [ 192.188341][T13950] dump_stack+0x10f/0x19d [ 192.192659][T13950] should_fail+0x23c/0x250 [ 192.197067][T13950] __should_failslab+0x81/0x90 [ 192.201868][T13950] should_failslab+0x5/0x20 [ 192.206357][T13950] slab_pre_alloc_hook+0x20/0xd0 [ 192.211276][T13950] kmem_cache_alloc+0x4f/0x2d0 [ 192.216012][T13950] ? __kernfs_new_node+0x6a/0x340 [ 192.221008][T13950] __kernfs_new_node+0x6a/0x340 [ 192.225831][T13950] ? kernfs_link_sibling+0x227/0x240 [ 192.231147][T13950] kernfs_new_node+0x5b/0xd0 [ 192.235719][T13950] __kernfs_create_file+0x45/0x1a0 [ 192.240811][T13950] sysfs_add_file_mode_ns+0x1c1/0x250 [ 192.246238][T13950] internal_create_group+0x2f4/0x890 [ 192.251507][T13950] sysfs_create_group+0x1b/0x20 [ 192.256392][T13950] loop_configure+0x97c/0xc70 [ 192.261038][T13950] lo_ioctl+0x554/0x1190 [ 192.265273][T13950] ? blkdev_common_ioctl+0xaae/0x10b0 [ 192.270621][T13950] ? putname+0xa5/0xc0 [ 192.274684][T13950] ? lo_release+0x130/0x130 [ 192.279169][T13950] blkdev_ioctl+0x1cf/0x410 [ 192.283653][T13950] block_ioctl+0x6d/0x80 [ 192.287877][T13950] ? blkdev_iopoll+0x80/0x80 [ 192.292527][T13950] __se_sys_ioctl+0xcb/0x140 [ 192.297095][T13950] __x64_sys_ioctl+0x3f/0x50 [ 192.301656][T13950] do_syscall_64+0x39/0x80 [ 192.306055][T13950] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 192.311918][T13950] RIP: 0033:0x45d427 [ 192.315798][T13950] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 bd b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 192.335476][T13950] RSP: 002b:00007fd2c87e4998 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 192.343951][T13950] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045d427 [ 192.351899][T13950] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 192.359854][T13950] RBP: 0000000000000000 R08: 0000000020000098 R09: 0000000000000000 [ 192.367801][T13950] R10: 00000000000001c0 R11: 0000000000000246 R12: 0000000000000001 07:00:58 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="680000002800310f00"/20, @ANYRES32=r3, @ANYBLOB="00000000045eb690b8ec354b6fcd8b2610004ff7cfffff000000000a0001006261736d630100003800020034000300300000000b0001006d6972720500000000000000000006000c00abff00000000000000005ac919d246b303b4ac95b4382a41c0c734f28506eaa12a2a82325ac07e0bc5690ca6ecf70c5b43d0102b230cb9578b313b4b49bd344f5f1a6a26d85d1b510e8ba6487fc2e1910c71bc9ed12694bc76975ff9e54fe89df0df5f499bf0dd083e650cb73d18c27979d9c4ac5ad15911c2090ea17088d91fc5879e9ac3ce0b77d28b28eede074139eb7d4a54aaad6263da14daeba8c3bff0df46ccac00"/252], 0x68}}, 0x0) [ 192.375758][T13950] R13: 0000000000000004 R14: 0000000000000004 R15: 00000000200000a8 07:00:58 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x80, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142, 0x8e}, {&(0x7f0000000180)=""/145, 0x91}, {&(0x7f0000000340)=""/126, 0x7e}, {&(0x7f0000000400)=""/130, 0x82}, {&(0x7f00000004c0)=""/149, 0x95}], 0x5, &(0x7f0000000240)=""/16, 0x10}}], 0x2, 0x0, 0x0) [ 192.436415][T13950] loop3: p2 < > p3 p4 < > [ 192.440850][T13950] loop3: partition table partially beyond EOD, truncated [ 192.449268][T13950] loop3: p2 start 25 is beyond EOD, truncated [ 192.471515][T13950] loop3: p3 start 4276224225 is beyond EOD, truncated [ 192.478352][T13956] loop5: p2 < > p3 p4 < > [ 192.484983][T13956] loop5: partition table partially beyond EOD, truncated [ 192.509803][T13956] loop5: p3 start 4276224225 is beyond EOD, truncated [ 192.536730][T13950] loop3: p4 size 2 extends beyond EOD, truncated [ 192.554803][ T5086] loop5: p2 < > p3 p4 < > [ 192.559271][ T5086] loop5: partition table partially beyond EOD, truncated [ 192.570138][ T5086] loop5: p3 start 4276224225 is beyond EOD, truncated 07:00:59 executing program 5: syz_read_part_table(0x40000803, 0x1, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff0a0000010000000000ffffff8500e931190000000000000680ffffff82000000e100e2fe87770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 07:00:59 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c000100"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) 07:00:59 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = syz_io_uring_setup(0x76d1, &(0x7f0000000040), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x1, 0x0, 0x0, 0x0, 0xf5ffffff00000000) 07:00:59 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x80, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142, 0x8e}, {&(0x7f0000000180)=""/145, 0x91}, {0x0}, {&(0x7f0000000340)=""/126, 0x7e}, {&(0x7f0000000400)=""/130, 0x82}, {&(0x7f00000004c0)=""/149, 0x95}], 0x6, &(0x7f0000000240)=""/16, 0x10}}], 0x2, 0x0, 0x0) 07:00:59 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="680000002800310f00"/20, @ANYRES32=r3, @ANYBLOB="00000000045eb690b8ec354b6fcd8b2610004ff7cfffff000000000a0001006261736d630100003800020034000300300000000b0001006d6972720500000000000000000006000c00abff00000000000000005ac919d246b303b4ac95b4382a41c0c734f28506eaa12a2a82325ac07e0bc5690ca6ecf70c5b43d0102b230cb9578b313b4b49bd344f5f1a6a26d85d1b510e8ba6487fc2e1910c71bc9ed12694bc76975ff9e54fe89df0df5f499bf0dd083e650cb73d18c27979d9c4ac5ad15911c2090ea17088d91fc5879e9ac3ce0b77d28b28eede074139eb7d4a54aaad6263da14daeba8c3bff0df46ccac00"/252], 0x68}}, 0x0) 07:00:59 executing program 3 (fault-call:0 fault-nth:22): syz_read_part_table(0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff0a0000010000000000ffffff8500e931190000000000000680ffffff82000000e100e2fe87770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) [ 192.663565][T13956] loop5: p2 < > p3 p4 < > [ 192.667987][T13956] loop5: partition table partially beyond EOD, truncated [ 192.676204][T13956] loop5: p3 start 4276224225 is beyond EOD, truncated [ 192.684672][ T5086] loop5: p2 < > p3 p4 < > [ 192.689081][ T5086] loop5: partition table partially beyond EOD, truncated [ 192.697592][ T5086] loop5: p3 start 4276224225 is beyond EOD, truncated 07:00:59 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x80, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142, 0x8e}, {&(0x7f0000000180)=""/145, 0x91}, {0x0}, {&(0x7f0000000340)=""/126, 0x7e}, {&(0x7f0000000400)=""/130, 0x82}, {&(0x7f00000004c0)=""/149, 0x95}], 0x6, &(0x7f0000000240)=""/16, 0x10}}], 0x2, 0x0, 0x0) 07:00:59 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) [ 192.774738][T14031] FAULT_INJECTION: forcing a failure. [ 192.774738][T14031] name failslab, interval 1, probability 0, space 0, times 0 [ 192.802046][T14031] CPU: 0 PID: 14031 Comm: syz-executor.3 Not tainted 5.9.0-rc4-syzkaller #0 [ 192.810703][T14031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 192.820742][T14031] Call Trace: 07:00:59 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',=\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r1 = syz_io_uring_setup(0x76d1, &(0x7f0000000040), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x1, 0x0, 0x0, 0x0, 0x0) 07:00:59 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="680000002800310f00"/20, @ANYRES32=r3, @ANYBLOB="00000000045eb690b8ec354b6fcd8b2610004ff7cfffff000000000a0001006261736d630100003800020034000300300000000b0001006d6972720500000000000000000006000c00abff00000000000000005ac919d246b303b4ac95b4382a41c0c734f28506eaa12a2a82325ac07e0bc5690ca6ecf70c5b43d0102b230cb9578b313b4b49bd344f5f1a6a26d85d1b510e8ba6487fc2e1910c71bc9ed12694bc76975ff9e54fe89df0df5f499bf0dd083e650cb73d18c27979d9c4ac5ad15911c2090ea17088d91fc5879e9ac3ce0b77d28b28eede074139eb7d4a54aaad6263da14daeba8c3bff0df46ccac00"/252], 0x68}}, 0x0) [ 192.824025][T14031] dump_stack+0x10f/0x19d [ 192.828360][T14031] should_fail+0x23c/0x250 [ 192.832808][T14031] __should_failslab+0x81/0x90 [ 192.837622][T14031] should_failslab+0x5/0x20 [ 192.842118][T14031] slab_pre_alloc_hook+0x20/0xd0 [ 192.847046][T14031] kmem_cache_alloc+0x4f/0x2d0 [ 192.851820][T14031] ? __kernfs_new_node+0x6a/0x340 [ 192.856836][T14031] __kernfs_new_node+0x6a/0x340 [ 192.861677][T14031] ? kernfs_link_sibling+0x227/0x240 [ 192.867092][T14031] kernfs_new_node+0x5b/0xd0 [ 192.871725][T14031] __kernfs_create_file+0x45/0x1a0 [ 192.876842][T14031] sysfs_add_file_mode_ns+0x1c1/0x250 [ 192.882191][T14031] internal_create_group+0x2f4/0x890 [ 192.887496][T14031] sysfs_create_group+0x1b/0x20 [ 192.892431][T14031] loop_configure+0x97c/0xc70 [ 192.897126][T14031] lo_ioctl+0x554/0x1190 [ 192.901449][T14031] ? blkdev_common_ioctl+0xaae/0x10b0 [ 192.906791][T14031] ? putname+0xa5/0xc0 [ 192.910828][T14031] ? lo_release+0x130/0x130 [ 192.915305][T14031] blkdev_ioctl+0x1cf/0x410 [ 192.919778][T14031] block_ioctl+0x6d/0x80 [ 192.924071][T14031] ? blkdev_iopoll+0x80/0x80 [ 192.928632][T14031] __se_sys_ioctl+0xcb/0x140 [ 192.933239][T14031] __x64_sys_ioctl+0x3f/0x50 [ 192.937842][T14031] do_syscall_64+0x39/0x80 [ 192.942238][T14031] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 192.948126][T14031] RIP: 0033:0x45d427 [ 192.951998][T14031] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 bd b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 192.971581][T14031] RSP: 002b:00007fd2c87e4998 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 192.980009][T14031] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045d427 [ 192.987956][T14031] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 192.995906][T14031] RBP: 0000000000000000 R08: 0000000020000098 R09: 0000000000000000 [ 193.003859][T14031] R10: 00000000000001c0 R11: 0000000000000246 R12: 0000000000000001 [ 193.011814][T14031] R13: 0000000000000004 R14: 0000000000000004 R15: 00000000200000a8 07:00:59 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = syz_io_uring_setup(0x76d1, &(0x7f0000000040), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x8101) write$rfkill(r4, &(0x7f00000003c0)={0x10001, 0x0, 0x1, 0x1}, 0x8) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x1, 0x0, 0x0, 0x0, 0x0) mmap$snddsp(&(0x7f0000ffa000/0x6000)=nil, 0x6000, 0x8, 0x10, r4, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=@delchain={0x68, 0x28, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0x4, 0xffff}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x38, 0x2, [@TCA_BASIC_ACT={0x34, 0x3, [@m_mirred={0x30, 0x0, 0x0, 0x0, {{0xb, 0x1, 'mirred\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x68}}, 0x0) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r7, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xf0, r9, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_DAEMON={0x60, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={[], [], @private=0xa010102}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x3a}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1={0xfc, 0x1, [], 0x1}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_DAEMON={0x64, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xd7}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x29}}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffff725}]}, 0xf0}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) 07:00:59 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x80, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142, 0x8e}, {&(0x7f0000000180)=""/145, 0x91}, {0x0}, {&(0x7f0000000340)=""/126, 0x7e}, {&(0x7f0000000400)=""/130, 0x82}, {&(0x7f00000004c0)=""/149, 0x95}], 0x6, &(0x7f0000000240)=""/16, 0x10}}], 0x2, 0x0, 0x0) [ 193.110535][T14031] loop3: p2 < > p3 p4 < > [ 193.117986][T14031] loop3: partition table partially beyond EOD, truncated [ 193.151409][T14031] loop3: p2 start 25 is beyond EOD, truncated [ 193.171100][T14031] loop3: p3 start 4276224225 is beyond EOD, truncated [ 193.178096][T14031] loop3: p4 size 2 extends beyond EOD, truncated [ 193.196660][T14073] loop5: p2 < > p3 p4 < > [ 193.201969][T14073] loop5: partition table partially beyond EOD, truncated [ 193.217066][T14073] loop5: p3 start 4276224225 is beyond EOD, truncated 07:00:59 executing program 5: syz_read_part_table(0x40000804, 0x1, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff0a0000010000000000ffffff8500e931190000000000000680ffffff82000000e100e2fe87770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 07:00:59 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c000100"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) 07:00:59 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="680000002800310f00"/20, @ANYRES32=r3, @ANYBLOB="00000000045eb690b8ec354b6fcd8b2610004ff7cfffff000000000a0001006261736d630100003800020034000300300000000b0001006d6972720500000000000000000006000c00abff00000000000000005ac919d246b303b4ac95b4382a41c0c734f28506eaa12a2a82325ac07e0bc5690ca6ecf70c5b43d0102b230cb9578b313b4b49bd344f5f1a6a26d85d1b510e8ba6487fc2e1910c71bc9ed12694bc76975ff9e54fe89df0df5f499bf0dd083e650cb73d18c27979d9c4ac5ad15911c2090ea17088d91fc5879e9ac3ce0b77d28b28eede074139eb7d4a54aaad6263da14daeba8c3bff0df46ccac00"/252], 0x68}}, 0x0) 07:00:59 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x80, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142, 0x8e}, {&(0x7f00000002c0)=""/80, 0x50}, {&(0x7f0000000340)=""/126, 0x7e}, {&(0x7f0000000400)=""/130, 0x82}, {&(0x7f00000004c0)=""/149, 0x95}], 0x5, &(0x7f0000000240)=""/16, 0x10}}], 0x2, 0x0, 0x0) 07:00:59 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = syz_io_uring_setup(0x76d1, &(0x7f0000000040), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x1, 0x0, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=@delchain={0x68, 0x28, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0x4, 0xffff}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x38, 0x2, [@TCA_BASIC_ACT={0x34, 0x3, [@m_mirred={0x30, 0x0, 0x0, 0x0, {{0xb, 0x1, 'mirred\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x68}}, 0x0) ioctl$sock_SIOCDELRT(r6, 0x890c, &(0x7f0000000180)={0x0, @generic={0x1f, "e25d92a139efe3ffb28d83d05f48"}, @ax25={0x3, @bcast, 0x1}, @vsock={0x28, 0x0, 0x2710, @hyper}, 0x800, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)='vlan0\x00', 0x7, 0x50}) 07:00:59 executing program 3 (fault-call:0 fault-nth:23): syz_read_part_table(0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff0a0000010000000000ffffff8500e931190000000000000680ffffff82000000e100e2fe87770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) [ 193.331710][T14073] loop5: p2 < > p3 p4 < > [ 193.337855][T14073] loop5: partition table partially beyond EOD, truncated [ 193.345956][T14073] loop5: p3 start 4276224225 is beyond EOD, truncated [ 193.355617][ T5086] loop5: p2 < > p3 p4 < > [ 193.360084][ T5086] loop5: partition table partially beyond EOD, truncated [ 193.368072][ T5086] loop5: p3 start 4276224225 is beyond EOD, truncated 07:00:59 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c000100"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) 07:00:59 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x80, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142, 0x8e}, {&(0x7f00000002c0)=""/80, 0x50}, {&(0x7f0000000340)=""/126, 0x7e}, {&(0x7f0000000400)=""/130, 0x82}, {&(0x7f00000004c0)=""/149, 0x95}], 0x5, &(0x7f0000000240)=""/16, 0x10}}], 0x2, 0x0, 0x0) 07:00:59 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="680000002800310f00"/20, @ANYRES32=r3, @ANYBLOB="00000000045eb690b8ec354b6fcd8b2610004ff7cfffff000000000a0001006261736d630100003800020034000300300000000b0001006d6972720500000000000000000006000c00abff00000000000000005ac919d246b303b4ac95b4382a41c0c734f28506eaa12a2a82325ac07e0bc5690ca6ecf70c5b43d0102b230cb9578b313b4b49bd344f5f1a6a26d85d1b510e8ba6487fc2e1910c71bc9ed12694bc76975ff9e54fe89df0df5f499bf0dd083e650cb73d18c27979d9c4ac5ad15911c2090ea17088d91fc5879e9ac3ce0b77d28b28eede074139eb7d4a54aaad6263da14daeba8c3bff0df46ccac00"/252], 0x68}}, 0x0) [ 193.449655][T14123] FAULT_INJECTION: forcing a failure. [ 193.449655][T14123] name failslab, interval 1, probability 0, space 0, times 0 [ 193.462963][T14123] CPU: 1 PID: 14123 Comm: syz-executor.3 Not tainted 5.9.0-rc4-syzkaller #0 [ 193.471681][T14123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 193.481727][T14123] Call Trace: [ 193.485098][T14123] dump_stack+0x10f/0x19d [ 193.489483][T14123] should_fail+0x23c/0x250 [ 193.493892][T14123] __should_failslab+0x81/0x90 [ 193.498644][T14123] should_failslab+0x5/0x20 [ 193.503147][T14123] slab_pre_alloc_hook+0x20/0xd0 [ 193.508078][T14123] ? tomoyo_realpath_from_path+0x98/0x3c0 [ 193.513853][T14123] __kmalloc+0x78/0x310 [ 193.518000][T14123] ? tomoyo_realpath_from_path+0x98/0x3c0 [ 193.523746][T14123] tomoyo_realpath_from_path+0x98/0x3c0 [ 193.529285][T14123] tomoyo_path_number_perm+0xc1/0x2d0 [ 193.534649][T14123] ? putname+0xa5/0xc0 [ 193.538712][T14123] ? __rcu_read_unlock+0x4b/0x260 [ 193.543727][T14123] tomoyo_file_ioctl+0x1c/0x20 [ 193.548541][T14123] security_file_ioctl+0x45/0x90 [ 193.553490][T14123] __se_sys_ioctl+0x48/0x140 [ 193.558073][T14123] __x64_sys_ioctl+0x3f/0x50 [ 193.562741][T14123] do_syscall_64+0x39/0x80 [ 193.567152][T14123] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 193.573058][T14123] RIP: 0033:0x45d427 [ 193.576945][T14123] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 bd b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 07:01:00 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x80, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142, 0x8e}, {&(0x7f00000002c0)=""/80, 0x50}, {&(0x7f0000000340)=""/126, 0x7e}, {&(0x7f0000000400)=""/130, 0x82}, {&(0x7f00000004c0)=""/149, 0x95}], 0x5, &(0x7f0000000240)=""/16, 0x10}}], 0x2, 0x0, 0x0) 07:01:00 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="680000002800310f00"/20, @ANYRES32=r3, @ANYBLOB="00000000045eb690b8ec354b6fcd8b2610004ff7cfffff000000000a0001006261736d630100003800020034000300300000000b0001006d6972720500000000000000000006000c00abff00000000000000005ac919d246b303b4ac95b4382a41c0c734f28506eaa12a2a82325ac07e0bc5690ca6ecf70c5b43d0102b230cb9578b313b4b49bd344f5f1a6a26d85d1b510e8ba6487fc2e1910c71bc9ed12694bc76975ff9e54fe89df0df5f499bf0dd083e650cb73d18c27979d9c4ac5ad15911c2090ea17088d91fc5879e9ac3ce0b77d28b28eede074139eb7d4a54aaad6263da14daeba8c3bff0df46ccac00"/252], 0x68}}, 0x0) 07:01:00 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c000100"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) [ 193.596557][T14123] RSP: 002b:00007fd2c87e49f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 193.604962][T14123] RAX: ffffffffffffffda RBX: 0000000020000080 RCX: 000000000045d427 [ 193.612921][T14123] RDX: 00007fd2c87e4ac0 RSI: 0000000000004c05 RDI: 0000000000000005 [ 193.620887][T14123] RBP: 00007fd2c87e4ca0 R08: 0000000020000098 R09: 0000000000000000 [ 193.628913][T14123] R10: 00000000000001c0 R11: 0000000000000246 R12: 0000000000000017 [ 193.636881][T14123] R13: 00007ffdb49f15af R14: 00007fd2c87e59c0 R15: 000000000118cf4c [ 193.652726][T14123] ERROR: Out of memory at tomoyo_realpath_from_path. [ 193.717824][ T5086] loop5: p2 < > p3 p4 < > [ 193.723444][ T5086] loop5: partition table partially beyond EOD, truncated [ 193.730026][T14165] __nla_validate_parse: 30 callbacks suppressed [ 193.730033][T14165] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 193.734455][ T5086] loop5: p3 start 4276224225 is beyond EOD, truncated [ 193.763148][T14165] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.2'. [ 193.766280][T14123] loop3: p2 < > p3 p4 < > [ 193.773655][T14144] loop5: p2 < > p3 p4 < > [ 193.781347][T14144] loop5: partition table partially beyond EOD, truncated [ 193.783018][T14123] loop3: partition table partially beyond EOD, truncated [ 193.797387][T14144] loop5: p3 start 4276224225 is beyond EOD, truncated [ 193.812531][T14123] loop3: p2 start 25 is beyond EOD, truncated [ 193.818595][T14123] loop3: p3 start 4276224225 is beyond EOD, truncated [ 193.825907][T14123] loop3: p4 size 2 extends beyond EOD, truncated 07:01:00 executing program 5: syz_read_part_table(0x40000805, 0x1, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff0a0000010000000000ffffff8500e931190000000000000680ffffff82000000e100e2fe87770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 07:01:00 executing program 0: write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)={0x24, 0x37, 0x2, {0x2, 0x654f607c, 0x7f, 0x0, 0x6, '+\xff$!\\)'}}, 0x24) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = syz_io_uring_setup(0x76d1, &(0x7f0000000040), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x1) setresuid(0x0, r5, 0x0) write$FUSE_ENTRY(r0, &(0x7f0000000140)={0x90, 0x0, 0x0, {0x5, 0x2, 0x3, 0x1f, 0x1de9, 0x0, {0x2, 0x2, 0x1c0, 0x5, 0xff7, 0x200c, 0x1, 0x0, 0x5a7, 0x1000, 0x20, r5, 0x0, 0x434c, 0x5}}}, 0x90) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r9, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="5400000024001d00"/20, @ANYRES32=r9, @ANYBLOB="00000000f1ffffff000000000900010068667363000000001400020010000200"/44], 0x44}}, 0x0) r10 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x404100, 0x0) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd=r10, 0x0, 0x0, 0x400, 0x1, 0x0, {0x0, r11, r6}}, 0x0) io_uring_enter(r1, 0x1, 0x0, 0x0, 0x0, 0x0) 07:01:00 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x80, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142, 0x8e}, {0x0}, {&(0x7f00000002c0)=""/80, 0x50}, {&(0x7f0000000340)=""/126, 0x7e}, {&(0x7f0000000400)=""/130, 0x82}, {&(0x7f00000004c0)=""/149, 0x95}], 0x6, &(0x7f0000000240)=""/16, 0x10}}], 0x2, 0x0, 0x0) 07:01:00 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) 07:01:00 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="680000002800310f00"/20, @ANYRES32=r3, @ANYBLOB="00000000045eb690b8ec354b6fcd8b2610004ff7cfffff000000000a0001006261736d630100003800020034000300300000000b0001006d6972720500000000000000000006000c00abff00000000000000005ac919d246b303b4ac95b4382a41c0c734f28506eaa12a2a82325ac07e0bc5690ca6ecf70c5b43d0102b230cb9578b313b4b49bd344f5f1a6a26d85d1b510e8ba6487fc2e1910c71bc9ed12694bc76975ff9e54fe89df0df5f499bf0dd083e650cb73d18c27979d9c4ac5ad15911c2090ea17088d91fc5879e9ac3ce0b77d28b28eede074139eb7d4a54aaad6263da14daeba8c3bff0df46ccac00"/252], 0x68}}, 0x0) 07:01:00 executing program 3 (fault-call:0 fault-nth:24): syz_read_part_table(0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff0a0000010000000000ffffff8500e931190000000000000680ffffff82000000e100e2fe87770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 07:01:00 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) [ 193.969097][T14192] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 07:01:00 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x80, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142, 0x8e}, {0x0}, {&(0x7f00000002c0)=""/80, 0x50}, {&(0x7f0000000340)=""/126, 0x7e}, {&(0x7f0000000400)=""/130, 0x82}, {&(0x7f00000004c0)=""/149, 0x95}], 0x6, &(0x7f0000000240)=""/16, 0x10}}], 0x2, 0x0, 0x0) 07:01:00 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="680000002800310f00"/20, @ANYRES32=r3, @ANYBLOB="00000000045eb690b8ec354b6fcd8b2610004ff7cfffff000000000a0001006261736d630100003800020034000300300000000b0001006d6972720500000000000000000006000c00abff00000000000000005ac919d246b303b4ac95b4382a41c0c734f28506eaa12a2a82325ac07e0bc5690ca6ecf70c5b43d0102b230cb9578b313b4b49bd344f5f1a6a26d85d1b510e8ba6487fc2e1910c71bc9ed12694bc76975ff9e54fe89df0df5f499bf0dd083e650cb73d18c27979d9c4ac5ad15911c2090ea17088d91fc5879e9ac3ce0b77d28b28eede074139eb7d4a54aaad6263da14daeba8c3bff0df46ccac00"/252], 0x68}}, 0x0) [ 194.019758][T14192] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.2'. [ 194.031718][T14206] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 194.042613][T14198] loop5: p2 < > p3 p4 < > [ 194.047138][T14203] FAULT_INJECTION: forcing a failure. [ 194.047138][T14203] name failslab, interval 1, probability 0, space 0, times 0 [ 194.070873][T14198] loop5: partition table partially beyond EOD, truncated [ 194.079706][T14224] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 194.094615][T14224] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.2'. [ 194.101773][T14198] loop5: p3 start 4276224225 is beyond EOD, truncated [ 194.119452][T14203] CPU: 0 PID: 14203 Comm: syz-executor.3 Not tainted 5.9.0-rc4-syzkaller #0 [ 194.128119][T14203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 194.133754][T14234] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 194.138157][T14203] Call Trace: [ 194.138177][T14203] dump_stack+0x10f/0x19d [ 194.138196][T14203] should_fail+0x23c/0x250 [ 194.155726][T14234] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.2'. [ 194.159511][T14203] __should_failslab+0x81/0x90 [ 194.159529][T14203] should_failslab+0x5/0x20 [ 194.178077][T14203] slab_pre_alloc_hook+0x20/0xd0 [ 194.183004][T14203] ? tomoyo_encode2+0x1e2/0x350 [ 194.187925][T14203] __kmalloc+0x78/0x310 [ 194.192074][T14203] ? tomoyo_encode2+0x1e2/0x350 [ 194.196913][T14203] tomoyo_encode2+0x1e2/0x350 [ 194.201580][T14203] tomoyo_realpath_from_path+0x36e/0x3c0 [ 194.207206][T14203] tomoyo_path_number_perm+0xc1/0x2d0 [ 194.212222][T14240] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 194.212568][T14203] ? putname+0xa5/0xc0 [ 194.212601][T14203] ? __rcu_read_unlock+0x4b/0x260 [ 194.230890][T14203] tomoyo_file_ioctl+0x1c/0x20 [ 194.235646][T14203] security_file_ioctl+0x45/0x90 [ 194.240586][T14203] __se_sys_ioctl+0x48/0x140 [ 194.245162][T14203] __x64_sys_ioctl+0x3f/0x50 [ 194.249737][T14203] do_syscall_64+0x39/0x80 [ 194.254143][T14203] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 194.260019][T14203] RIP: 0033:0x45d427 07:01:00 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="680000002800310f00"/20, @ANYRES32=r3, @ANYBLOB="00000000045eb690b8ec354b6fcd8b2610004ff7cfffff000000000a0001006261736d630100003800020034000300300000000b0001006d6972720500000000000000000006000c00abff00000000000000005ac919d246b303b4ac95b4382a41c0c734f28506eaa12a2a82325ac07e0bc5690ca6ecf70c5b43d0102b230cb9578b313b4b49bd344f5f1a6a26d85d1b510e8ba6487fc2e1910c71bc9ed12694bc76975ff9e54fe89df0df5f499bf0dd083e650cb73d18c27979d9c4ac5ad15911c2090ea17088d91fc5879e9ac3ce0b77d28b28eede074139eb7d4a54aaad6263da14daeba8c3bff0df46ccac00"/252], 0x68}}, 0x0) 07:01:00 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="680000002800310f00"/20, @ANYRES32=r3, @ANYBLOB="00000000045eb690b8ec354b6fcd8b2610004ff7cfffff000000000a0001006261736d630100003800020034000300300000000b0001006d6972720500000000000000000006000c00abff00000000000000005ac919d246b303b4ac95b4382a41c0c734f28506eaa12a2a82325ac07e0bc5690ca6ecf70c5b43d0102b230cb9578b313b4b49bd344f5f1a6a26d85d1b510e8ba6487fc2e1910c71bc9ed12694bc76975ff9e54fe89df0df5f499bf0dd083e650cb73d18c27979d9c4ac5ad15911c2090ea17088d91fc5879e9ac3ce0b77d28b28eede074139eb7d4a54aaad6263da14daeba8c3bff0df46ccac00"/252], 0x68}}, 0x0) 07:01:00 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="680000002800310f00"/20, @ANYRES32=r3, @ANYBLOB="00000000045eb690b8ec354b6fcd8b2610004ff7cfffff000000000a0001006261736d630100003800020034000300300000000b0001006d6972720500000000000000000006000c00abff00000000000000005ac919d246b303b4ac95b4382a41c0c734f28506eaa12a2a82325ac07e0bc5690ca6ecf70c5b43d0102b230cb9578b313b4b49bd344f5f1a6a26d85d1b510e8ba6487fc2e1910c71bc9ed12694bc76975ff9e54fe89df0df5f499bf0dd083e650cb73d18c27979d9c4ac5ad15911c2090ea17088d91fc5879e9ac3ce0b77d28b28eede074139eb7d4a54aaad6263da14daeba8c3bff0df46ccac00"/252], 0x68}}, 0x0) [ 194.263914][T14203] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 bd b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 194.283504][T14203] RSP: 002b:00007fd2c87e49f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 194.291900][T14203] RAX: ffffffffffffffda RBX: 0000000020000080 RCX: 000000000045d427 [ 194.299860][T14203] RDX: 00007fd2c87e4ac0 RSI: 0000000000004c05 RDI: 0000000000000005 [ 194.307854][T14203] RBP: 00007fd2c87e4ca0 R08: 0000000020000098 R09: 0000000000000000 [ 194.315816][T14203] R10: 00000000000001c0 R11: 0000000000000246 R12: 0000000000000018 [ 194.323772][T14203] R13: 00007ffdb49f15af R14: 00007fd2c87e59c0 R15: 000000000118cf4c [ 194.338967][T14203] ERROR: Out of memory at tomoyo_realpath_from_path. [ 194.353044][ T5086] loop5: p2 < > p3 p4 < > [ 194.357469][ T5086] loop5: partition table partially beyond EOD, truncated [ 194.365526][ T5086] loop5: p3 start 4276224225 is beyond EOD, truncated [ 194.383994][T14203] loop3: p2 < > p3 p4 < > [ 194.388411][T14203] loop3: partition table partially beyond EOD, truncated [ 194.397613][T14203] loop3: p2 start 25 is beyond EOD, truncated [ 194.404182][T14203] loop3: p3 start 4276224225 is beyond EOD, truncated [ 194.410963][T14203] loop3: p4 size 2 extends beyond EOD, truncated [ 194.559096][ T5086] loop5: p2 < > p3 p4 < > [ 194.563704][ T5086] loop5: partition table partially beyond EOD, truncated [ 194.571239][ T5086] loop5: p3 start 4276224225 is beyond EOD, truncated [ 194.579996][T14198] loop5: p2 < > p3 p4 < > [ 194.584665][T14198] loop5: partition table partially beyond EOD, truncated [ 194.592638][T14198] loop5: p3 start 4276224225 is beyond EOD, truncated 07:01:01 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x80, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142, 0x8e}, {0x0}, {&(0x7f00000002c0)=""/80, 0x50}, {&(0x7f0000000340)=""/126, 0x7e}, {&(0x7f0000000400)=""/130, 0x82}, {&(0x7f00000004c0)=""/149, 0x95}], 0x6, &(0x7f0000000240)=""/16, 0x10}}], 0x2, 0x0, 0x0) 07:01:01 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="680000002800310f00"/20, @ANYRES32=r3, @ANYBLOB="00000000045eb690b8ec354b6fcd8b2610004ff7cfffff000000000a0001006261736d630100003800020034000300300000000b0001006d6972720500000000000000000006000c00abff00000000000000005ac919d246b303b4ac95b4382a41c0c734f28506eaa12a2a82325ac07e0bc5690ca6ecf70c5b43d0102b230cb9578b313b4b49bd344f5f1a6a26d85d1b510e8ba6487fc2e1910c71bc9ed12694bc76975ff9e54fe89df0df5f499bf0dd083e650cb73d18c27979d9c4ac5ad15911c2090ea17088d91fc5879e9ac3ce0b77d28b28eede074139eb7d4a54aaad6263da14daeba8c3bff0df46ccac00"/252], 0x68}}, 0x0) 07:01:01 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) 07:01:01 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="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", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r1 = syz_io_uring_setup(0x76d1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xfffffffe, 0x3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x1, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000380)={0xffffffffffffffff}, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r4, 0xf501, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000300)=""/37, &(0x7f0000000340)=0x25) 07:01:01 executing program 3 (fault-call:0 fault-nth:25): syz_read_part_table(0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff0a0000010000000000ffffff8500e931190000000000000680ffffff82000000e100e2fe87770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 07:01:01 executing program 5: syz_read_part_table(0x40000806, 0x1, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff0a0000010000000000ffffff8500e931190000000000000680ffffff82000000e100e2fe87770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) [ 194.657945][ T5086] loop5: p2 < > p3 p4 < > [ 194.663112][ T5086] loop5: partition table partially beyond EOD, truncated [ 194.685366][ T5086] loop5: p3 start 4276224225 is beyond EOD, truncated 07:01:01 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) 07:01:01 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000180)=""/145, 0x91}, {&(0x7f00000002c0)=""/80, 0x50}, {&(0x7f0000000340)=""/126, 0x7e}, {&(0x7f0000000400)=""/130, 0x82}, {&(0x7f00000004c0)=""/149, 0x95}], 0x5, &(0x7f0000000240)=""/16, 0x10}}], 0x2, 0x0, 0x0) 07:01:01 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="680000002800310f00"/20, @ANYRES32=r3, @ANYBLOB="00000000045eb690b8ec354b6fcd8b2610004ff7cfffff000000000a0001006261736d630100003800020034000300300000000b0001006d6972720500000000000000000006000c00abff00000000000000005ac919d246b303b4ac95b4382a41c0c734f28506eaa12a2a82325ac07e0bc5690ca6ecf70c5b43d0102b230cb9578b313b4b49bd344f5f1a6a26d85d1b510e8ba6487fc2e1910c71bc9ed12694bc76975ff9e54fe89df0df5f499bf0dd083e650cb73d18c27979d9c4ac5ad15911c2090ea17088d91fc5879e9ac3ce0b77d28b28eede074139eb7d4a54aaad6263da14daeba8c3bff0df46ccac00"/252], 0x68}}, 0x0) [ 194.719823][T14292] fuse: Bad value for 'group_id' [ 194.744676][T14297] fuse: Bad value for 'group_id' [ 194.754019][T14289] FAULT_INJECTION: forcing a failure. [ 194.754019][T14289] name failslab, interval 1, probability 0, space 0, times 0 [ 194.771601][T14289] CPU: 1 PID: 14289 Comm: syz-executor.3 Not tainted 5.9.0-rc4-syzkaller #0 [ 194.780264][T14289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 194.790305][T14289] Call Trace: [ 194.793717][T14289] dump_stack+0x10f/0x19d [ 194.798033][T14289] should_fail+0x23c/0x250 [ 194.802495][T14289] __should_failslab+0x81/0x90 [ 194.807290][T14289] should_failslab+0x5/0x20 [ 194.811783][T14289] slab_pre_alloc_hook+0x20/0xd0 [ 194.816727][T14289] ? tomoyo_encode2+0x1e2/0x350 [ 194.821566][T14289] __kmalloc+0x78/0x310 [ 194.825722][T14289] ? tomoyo_encode2+0x1e2/0x350 [ 194.830566][T14289] tomoyo_encode2+0x1e2/0x350 [ 194.835253][T14289] tomoyo_realpath_from_path+0x36e/0x3c0 [ 194.840964][T14289] tomoyo_path_number_perm+0xc1/0x2d0 [ 194.846378][T14289] ? putname+0xa5/0xc0 [ 194.850460][T14289] ? __rcu_read_unlock+0x4b/0x260 [ 194.855557][T14289] tomoyo_file_ioctl+0x1c/0x20 [ 194.860342][T14289] security_file_ioctl+0x45/0x90 [ 194.865274][T14289] __se_sys_ioctl+0x48/0x140 [ 194.869859][T14289] __x64_sys_ioctl+0x3f/0x50 [ 194.874439][T14289] do_syscall_64+0x39/0x80 [ 194.878887][T14289] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 194.884766][T14289] RIP: 0033:0x45d427 07:01:01 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000180)=""/145, 0x91}, {&(0x7f00000002c0)=""/80, 0x50}, {&(0x7f0000000340)=""/126, 0x7e}, {&(0x7f0000000400)=""/130, 0x82}, {&(0x7f00000004c0)=""/149, 0x95}], 0x5, &(0x7f0000000240)=""/16, 0x10}}], 0x2, 0x0, 0x0) 07:01:01 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="680000002800310f00"/20, @ANYRES32=r3, @ANYBLOB="00000000045eb690b8ec354b6fcd8b2610004ff7cfffff000000000a0001006261736d630100003800020034000300300000000b0001006d6972720500000000000000000006000c00abff00000000000000005ac919d246b303b4ac95b4382a41c0c734f28506eaa12a2a82325ac07e0bc5690ca6ecf70c5b43d0102b230cb9578b313b4b49bd344f5f1a6a26d85d1b510e8ba6487fc2e1910c71bc9ed12694bc76975ff9e54fe89df0df5f499bf0dd083e650cb73d18c27979d9c4ac5ad15911c2090ea17088d91fc5879e9ac3ce0b77d28b28eede074139eb7d4a54aaad6263da14daeba8c3bff0df46ccac00"/252], 0x68}}, 0x0) [ 194.888652][T14289] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 bd b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 194.908249][T14289] RSP: 002b:00007fd2c87e49f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 194.916723][T14289] RAX: ffffffffffffffda RBX: 0000000020000080 RCX: 000000000045d427 [ 194.924677][T14289] RDX: 00007fd2c87e4ac0 RSI: 0000000000004c05 RDI: 0000000000000005 [ 194.932620][T14289] RBP: 00007fd2c87e4ca0 R08: 0000000020000098 R09: 0000000000000000 07:01:01 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r0 = syz_io_uring_setup(0x76d1, &(0x7f0000000040), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=@delchain={0x68, 0x28, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0x4, 0xffff}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x38, 0x2, [@TCA_BASIC_ACT={0x34, 0x3, [@m_mirred={0x30, 0x0, 0x0, 0x0, {{0xb, 0x1, 'mirred\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x68}}, 0x0) setsockopt$inet_sctp_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f0000000200)={0x0, 0x2, 0x6, 0x1, 0x4, 0x7}, 0x14) fchmod(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) statfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=""/53) io_uring_enter(r0, 0x1, 0x0, 0x0, 0x0, 0x0) 07:01:01 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) [ 194.940561][T14289] R10: 00000000000001c0 R11: 0000000000000246 R12: 0000000000000019 [ 194.948507][T14289] R13: 00007ffdb49f15af R14: 00007fd2c87e59c0 R15: 000000000118cf4c [ 194.968500][T14289] ERROR: Out of memory at tomoyo_realpath_from_path. 07:01:01 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000180)=""/145, 0x91}, {&(0x7f00000002c0)=""/80, 0x50}, {&(0x7f0000000340)=""/126, 0x7e}, {&(0x7f0000000400)=""/130, 0x82}, {&(0x7f00000004c0)=""/149, 0x95}], 0x5, &(0x7f0000000240)=""/16, 0x10}}], 0x2, 0x0, 0x0) 07:01:01 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) 07:01:01 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="680000002800310f00"/20, @ANYRES32=r3, @ANYBLOB="00000000045eb690b8ec354b6fcd8b2610004ff7cfffff000000000a0001006261736d630100003800020034000300300000000b0001006d6972720500000000000000000006000c00abff00000000000000005ac919d246b303b4ac95b4382a41c0c734f28506eaa12a2a82325ac07e0bc5690ca6ecf70c5b43d0102b230cb9578b313b4b49bd344f5f1a6a26d85d1b510e8ba6487fc2e1910c71bc9ed12694bc76975ff9e54fe89df0df5f499bf0dd083e650cb73d18c27979d9c4ac5ad15911c2090ea17088d91fc5879e9ac3ce0b77d28b28eede074139eb7d4a54aaad6263da14daeba8c3bff0df46ccac00"/252], 0x68}}, 0x0) [ 195.032791][T14289] loop3: p2 < > p3 p4 < > [ 195.038522][T14289] loop3: partition table partially beyond EOD, truncated [ 195.067062][T14289] loop3: p2 start 25 is beyond EOD, truncated [ 195.079933][T14289] loop3: p3 start 4276224225 is beyond EOD, truncated [ 195.095519][T14324] loop5: p2 < > p3 p4 < > [ 195.105136][T14324] loop5: partition table partially beyond EOD, truncated [ 195.122053][T14324] loop5: p3 start 4276224225 is beyond EOD, truncated [ 195.127479][T14289] loop3: p4 size 2 extends beyond EOD, truncated 07:01:01 executing program 3 (fault-call:0 fault-nth:26): syz_read_part_table(0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff0a0000010000000000ffffff8500e931190000000000000680ffffff82000000e100e2fe87770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 07:01:01 executing program 5: syz_read_part_table(0x40000807, 0x1, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff0a0000010000000000ffffff8500e931190000000000000680ffffff82000000e100e2fe87770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 07:01:01 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = syz_io_uring_setup(0x76d1, &(0x7f0000000040), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r4, 0x200, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xb3}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004040}, 0x4c090) io_uring_enter(r1, 0x1, 0x0, 0x0, 0x0, 0x0) 07:01:01 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x80, &(0x7f0000000580)=[{0x0}, {&(0x7f0000000180)=""/145, 0x91}, {&(0x7f00000002c0)=""/80, 0x50}, {&(0x7f0000000340)=""/126, 0x7e}, {&(0x7f0000000400)=""/130, 0x82}, {&(0x7f00000004c0)=""/149, 0x95}], 0x6, &(0x7f0000000240)=""/16, 0x10}}], 0x2, 0x0, 0x0) 07:01:01 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) 07:01:01 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="680000002800310f00"/20, @ANYRES32=r3, @ANYBLOB="00000000045eb690b8ec354b6fcd8b2610004ff7cfffff000000000a0001006261736d630100003800020034000300300000000b0001006d6972720500000000000000000006000c00abff00000000000000005ac919d246b303b4ac95b4382a41c0c734f28506eaa12a2a82325ac07e0bc5690ca6ecf70c5b43d0102b230cb9578b313b4b49bd344f5f1a6a26d85d1b510e8ba6487fc2e1910c71bc9ed12694bc76975ff9e54fe89df0df5f499bf0dd083e650cb73d18c27979d9c4ac5ad15911c2090ea17088d91fc5879e9ac3ce0b77d28b28eede074139eb7d4a54aaad6263da14daeba8c3bff0df46ccac00"/252], 0x68}}, 0x0) [ 195.274105][T14324] loop5: p2 < > p3 p4 < > [ 195.278564][T14324] loop5: partition table partially beyond EOD, truncated [ 195.286780][T14324] loop5: p3 start 4276224225 is beyond EOD, truncated [ 195.297652][ T5086] loop5: p2 < > p3 p4 < > [ 195.305462][ T5086] loop5: partition table partially beyond EOD, truncated [ 195.322481][ T5086] loop5: p3 start 4276224225 is beyond EOD, truncated 07:01:01 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) [ 195.366601][T14384] FAULT_INJECTION: forcing a failure. [ 195.366601][T14384] name failslab, interval 1, probability 0, space 0, times 0 [ 195.397342][T14384] CPU: 0 PID: 14384 Comm: syz-executor.3 Not tainted 5.9.0-rc4-syzkaller #0 [ 195.406020][T14384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 07:01:01 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) [ 195.416075][T14384] Call Trace: [ 195.419377][T14384] dump_stack+0x10f/0x19d [ 195.423702][T14384] should_fail+0x23c/0x250 [ 195.428115][T14384] __should_failslab+0x81/0x90 [ 195.432870][T14384] should_failslab+0x5/0x20 [ 195.437363][T14384] slab_pre_alloc_hook+0x20/0xd0 [ 195.442317][T14384] ? tomoyo_encode2+0x1e2/0x350 [ 195.447160][T14384] __kmalloc+0x78/0x310 [ 195.451308][T14384] ? tomoyo_encode2+0x1e2/0x350 [ 195.456241][T14384] tomoyo_encode2+0x1e2/0x350 [ 195.460929][T14384] tomoyo_realpath_from_path+0x36e/0x3c0 07:01:01 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x80, &(0x7f0000000580)=[{0x0}, {&(0x7f0000000180)=""/145, 0x91}, {&(0x7f00000002c0)=""/80, 0x50}, {&(0x7f0000000340)=""/126, 0x7e}, {&(0x7f0000000400)=""/130, 0x82}, {&(0x7f00000004c0)=""/149, 0x95}], 0x6, &(0x7f0000000240)=""/16, 0x10}}], 0x2, 0x0, 0x0) [ 195.466558][T14384] tomoyo_path_number_perm+0xc1/0x2d0 [ 195.471933][T14384] ? putname+0xa5/0xc0 [ 195.475993][T14384] ? __rcu_read_unlock+0x4b/0x260 [ 195.481105][T14384] tomoyo_file_ioctl+0x1c/0x20 [ 195.485860][T14384] security_file_ioctl+0x45/0x90 [ 195.490790][T14384] __se_sys_ioctl+0x48/0x140 [ 195.495361][T14384] __x64_sys_ioctl+0x3f/0x50 [ 195.499928][T14384] do_syscall_64+0x39/0x80 [ 195.504324][T14384] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 195.510200][T14384] RIP: 0033:0x45d427 [ 195.514081][T14384] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 bd b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 195.533666][T14384] RSP: 002b:00007fd2c87e49f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 195.542048][T14384] RAX: ffffffffffffffda RBX: 0000000020000080 RCX: 000000000045d427 [ 195.550005][T14384] RDX: 00007fd2c87e4ac0 RSI: 0000000000004c05 RDI: 0000000000000005 [ 195.557967][T14384] RBP: 00007fd2c87e4ca0 R08: 0000000020000098 R09: 0000000000000000 07:01:02 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="680000002800310f00"/20, @ANYRES32=r3, @ANYBLOB="00000000045eb690b8ec354b6fcd8b2610004ff7cfffff000000000a0001006261736d630100003800020034000300300000000b0001006d6972720500000000000000000006000c00abff00000000000000005ac919d246b303b4ac95b4382a41c0c734f28506eaa12a2a82325ac07e0bc5690ca6ecf70c5b43d0102b230cb9578b313b4b49bd344f5f1a6a26d85d1b510e8ba6487fc2e1910c71bc9ed12694bc76975ff9e54fe89df0df5f499bf0dd083e650cb73d18c27979d9c4ac5ad15911c2090ea17088d91fc5879e9ac3ce0b77d28b28eede074139eb7d4a54aaad6263da14daeba8c3bff0df46ccac00"/252], 0x68}}, 0x0) [ 195.565922][T14384] R10: 00000000000001c0 R11: 0000000000000246 R12: 000000000000001a [ 195.573894][T14384] R13: 00007ffdb49f15af R14: 00007fd2c87e59c0 R15: 000000000118cf4c [ 195.582965][T14384] ERROR: Out of memory at tomoyo_realpath_from_path. 07:01:02 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00') r3 = socket(0x100000000011, 0x2, 0x0) bind(r3, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e2526f0c0900000036005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000001000101013c5811039e17775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c0001000000f3ffff2f43740000000000000006ad8e5ecc326d3a0000c2c65400"}, 0x80) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0}, &(0x7f0000000080)=0x14) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x1c, r2, 0x301, 0x0, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x1c}}, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='nd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',gr{up\x00\x00\x00\x00', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020) r5 = syz_io_uring_setup(0x76d1, &(0x7f0000000040), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r5, 0x1, 0x0, 0x0, 0x0, 0x0) [ 195.619452][T14385] loop5: p2 < > p3 p4 < > [ 195.624007][T14385] loop5: partition table partially beyond EOD, truncated [ 195.634350][T14385] loop5: p3 start 4276224225 is beyond EOD, truncated [ 195.651095][ T5086] loop5: p2 < > p3 p4 < > [ 195.670954][T14384] loop3: p2 < > p3 p4 < > [ 195.671105][ T5086] loop5: partition table partially beyond EOD, truncated [ 195.683228][T14384] loop3: partition table partially beyond EOD, truncated [ 195.691100][ T5086] loop5: p3 start 4276224225 is beyond EOD, truncated [ 195.714768][T14384] loop3: p2 start 25 is beyond EOD, truncated 07:01:02 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) [ 195.720562][T14424] fuse: Unknown parameter 'nd' [ 195.730796][T14384] loop3: p3 start 4276224225 is beyond EOD, truncated [ 195.771388][T14384] loop3: p4 size 2 extends beyond EOD, truncated [ 195.794318][T14385] loop5: p2 < > p3 p4 < > [ 195.798776][T14385] loop5: partition table partially beyond EOD, truncated [ 195.806959][T14439] fuse: Unknown parameter 'nd' [ 195.817136][T14385] loop5: p3 start 4276224225 is beyond EOD, truncated 07:01:02 executing program 3 (fault-call:0 fault-nth:27): syz_read_part_table(0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff0a0000010000000000ffffff8500e931190000000000000680ffffff82000000e100e2fe87770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 07:01:02 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x80, &(0x7f0000000580)=[{0x0}, {&(0x7f0000000180)=""/145, 0x91}, {&(0x7f00000002c0)=""/80, 0x50}, {&(0x7f0000000340)=""/126, 0x7e}, {&(0x7f0000000400)=""/130, 0x82}, {&(0x7f00000004c0)=""/149, 0x95}], 0x6, &(0x7f0000000240)=""/16, 0x10}}], 0x2, 0x0, 0x0) 07:01:02 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="680000002800310f00"/20, @ANYRES32=r3, @ANYBLOB="00000000045eb690b8ec354b6fcd8b2610004ff7cfffff000000000a0001006261736d630100003800020034000300300000000b0001006d6972720500000000000000000006000c00abff00000000000000005ac919d246b303b4ac95b4382a41c0c734f28506eaa12a2a82325ac07e0bc5690ca6ecf70c5b43d0102b230cb9578b313b4b49bd344f5f1a6a26d85d1b510e8ba6487fc2e1910c71bc9ed12694bc76975ff9e54fe89df0df5f499bf0dd083e650cb73d18c27979d9c4ac5ad15911c2090ea17088d91fc5879e9ac3ce0b77d28b28eede074139eb7d4a54aaad6263da14daeba8c3bff0df46ccac00"/252], 0x68}}, 0x0) 07:01:02 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) 07:01:02 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = syz_io_uring_setup(0x76d1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x1, 0x0, 0x0, 0x0, 0x0) 07:01:02 executing program 5: syz_read_part_table(0x40000808, 0x1, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff0a0000010000000000ffffff8500e931190000000000000680ffffff82000000e100e2fe87770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) [ 195.912819][ T5086] loop5: p2 < > p3 p4 < > [ 195.922385][ T5086] loop5: partition table partially beyond EOD, truncated [ 195.929963][ T5086] loop5: p3 start 4276224225 is beyond EOD, truncated 07:01:02 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) 07:01:02 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x80, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142, 0x8e}, {&(0x7f0000000180)=""/145, 0x91}, {&(0x7f00000002c0)=""/80, 0x50}, {&(0x7f0000000340)=""/126, 0x7e}, {&(0x7f0000000400)=""/130, 0x82}, {&(0x7f00000004c0)=""/149, 0x95}], 0x6}}], 0x2, 0x0, 0x0) 07:01:02 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) [ 196.000291][T14464] FAULT_INJECTION: forcing a failure. [ 196.000291][T14464] name failslab, interval 1, probability 0, space 0, times 0 [ 196.051156][T14464] CPU: 1 PID: 14464 Comm: syz-executor.3 Not tainted 5.9.0-rc4-syzkaller #0 [ 196.059855][T14464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 196.069895][T14464] Call Trace: [ 196.073178][T14464] dump_stack+0x10f/0x19d [ 196.077515][T14464] should_fail+0x23c/0x250 [ 196.081918][T14464] __should_failslab+0x81/0x90 [ 196.086673][T14464] should_failslab+0x5/0x20 [ 196.091162][T14464] slab_pre_alloc_hook+0x20/0xd0 [ 196.096093][T14464] ? tomoyo_realpath_from_path+0x98/0x3c0 [ 196.101805][T14464] __kmalloc+0x78/0x310 [ 196.105963][T14464] ? tomoyo_realpath_from_path+0x98/0x3c0 [ 196.111671][T14464] tomoyo_realpath_from_path+0x98/0x3c0 [ 196.117220][T14464] tomoyo_path_number_perm+0xc1/0x2d0 [ 196.122634][T14464] ? putname+0xa5/0xc0 [ 196.126808][T14464] ? __rcu_read_unlock+0x4b/0x260 [ 196.131864][T14464] tomoyo_file_ioctl+0x1c/0x20 [ 196.136657][T14464] security_file_ioctl+0x45/0x90 [ 196.141566][T14464] __se_sys_ioctl+0x48/0x140 [ 196.146144][T14464] __x64_sys_ioctl+0x3f/0x50 [ 196.150704][T14464] do_syscall_64+0x39/0x80 [ 196.155093][T14464] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 196.160996][T14464] RIP: 0033:0x45d427 [ 196.164862][T14464] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 bd b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 196.184437][T14464] RSP: 002b:00007fd2c87e49f8 EFLAGS: 00000202 ORIG_RAX: 0000000000000010 [ 196.192857][T14464] RAX: ffffffffffffffda RBX: 0000000020000080 RCX: 000000000045d427 07:01:02 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x80, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142, 0x8e}, {&(0x7f0000000180)=""/145, 0x91}, {&(0x7f00000002c0)=""/80, 0x50}, {&(0x7f0000000340)=""/126, 0x7e}, {&(0x7f0000000400)=""/130, 0x82}, {&(0x7f00000004c0)=""/149, 0x95}], 0x6}}], 0x2, 0x0, 0x0) 07:01:02 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) 07:01:02 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) [ 196.200807][T14464] RDX: 00007fd2c87e4ac0 RSI: 0000000000004c04 RDI: 0000000000000005 [ 196.208857][T14464] RBP: 00007fd2c87e4ca0 R08: 0000000020000098 R09: 0000000000000000 [ 196.216912][T14464] R10: 00000000000001c0 R11: 0000000000000202 R12: 000000000000001b [ 196.224856][T14464] R13: 00007ffdb49f15af R14: 00007fd2c87e59c0 R15: 000000000118cf4c [ 196.249899][T14464] ERROR: Out of memory at tomoyo_realpath_from_path. [ 196.277639][ T5086] loop5: p2 < > p3 p4 < > [ 196.282621][ T5086] loop5: partition table partially beyond EOD, truncated [ 196.294865][ T5086] loop5: p3 start 4276224225 is beyond EOD, truncated [ 196.304417][T14479] loop5: p2 < > p3 p4 < > [ 196.308923][T14479] loop5: partition table partially beyond EOD, truncated [ 196.318066][T14479] loop5: p3 start 4276224225 is beyond EOD, truncated [ 196.332192][T14464] loop3: p2 < > p3 p4 < > [ 196.338609][T14464] loop3: partition table partially beyond EOD, truncated [ 196.347218][T14464] loop3: p2 start 25 is beyond EOD, truncated [ 196.357270][T14464] loop3: p3 start 4276224225 is beyond EOD, truncated [ 196.364491][T14464] loop3: p4 size 2 extends beyond EOD, truncated 07:01:02 executing program 3 (fault-call:0 fault-nth:28): syz_read_part_table(0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff0a0000010000000000ffffff8500e931190000000000000680ffffff82000000e100e2fe87770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 07:01:02 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x10001}}, {@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}, {@allow_other='allow_other'}, {@max_read={'max_read', 0x3d, 0x1f}}]}}) r1 = syz_io_uring_setup(0x76d1, &(0x7f0000000040), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x1, 0x0, 0x0, 0x0, 0x0) 07:01:02 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) 07:01:02 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x80, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142, 0x8e}, {&(0x7f0000000180)=""/145, 0x91}, {&(0x7f00000002c0)=""/80, 0x50}, {&(0x7f0000000340)=""/126, 0x7e}, {&(0x7f0000000400)=""/130, 0x82}, {&(0x7f00000004c0)=""/149, 0x95}], 0x6}}], 0x2, 0x0, 0x0) 07:01:02 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) 07:01:02 executing program 5: syz_read_part_table(0x40000809, 0x1, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff0a0000010000000000ffffff8500e931190000000000000680ffffff82000000e100e2fe87770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 07:01:02 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) 07:01:02 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x80, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142, 0x8e}, {&(0x7f0000000180)=""/145, 0x91}, {&(0x7f00000002c0)=""/80, 0x50}, {&(0x7f0000000340)=""/126, 0x7e}, {&(0x7f0000000400)=""/130, 0x82}, {&(0x7f00000004c0)=""/149, 0x95}], 0x6, &(0x7f0000000240)=""/16, 0x10}}], 0x1, 0x0, 0x0) 07:01:03 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) [ 196.513496][ T5086] loop5: p2 < > p3 p4 < > [ 196.518030][ T5086] loop5: partition table partially beyond EOD, truncated [ 196.529926][T14537] FAULT_INJECTION: forcing a failure. [ 196.529926][T14537] name failslab, interval 1, probability 0, space 0, times 0 [ 196.541168][ T5086] loop5: p3 start 4276224225 is beyond EOD, truncated [ 196.555720][T14537] CPU: 0 PID: 14537 Comm: syz-executor.3 Not tainted 5.9.0-rc4-syzkaller #0 [ 196.564395][T14537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 196.574436][T14537] Call Trace: [ 196.577720][T14537] dump_stack+0x10f/0x19d [ 196.582114][T14537] should_fail+0x23c/0x250 [ 196.586543][T14537] __should_failslab+0x81/0x90 [ 196.591295][T14537] should_failslab+0x5/0x20 [ 196.595787][T14537] slab_pre_alloc_hook+0x20/0xd0 [ 196.600710][T14537] ? tomoyo_encode2+0x1e2/0x350 [ 196.605562][T14537] __kmalloc+0x78/0x310 [ 196.609707][T14537] ? tomoyo_encode2+0x1e2/0x350 [ 196.614542][T14537] tomoyo_encode2+0x1e2/0x350 [ 196.619216][T14537] tomoyo_realpath_from_path+0x36e/0x3c0 [ 196.625129][T14537] tomoyo_path_number_perm+0xc1/0x2d0 [ 196.630491][T14537] ? putname+0xa5/0xc0 [ 196.634633][T14537] ? __rcu_read_unlock+0x4b/0x260 [ 196.639640][T14537] tomoyo_file_ioctl+0x1c/0x20 [ 196.644391][T14537] security_file_ioctl+0x45/0x90 [ 196.649393][T14537] __se_sys_ioctl+0x48/0x140 [ 196.653985][T14537] __x64_sys_ioctl+0x3f/0x50 [ 196.658571][T14537] do_syscall_64+0x39/0x80 [ 196.662973][T14537] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 196.668843][T14537] RIP: 0033:0x45d427 [ 196.672722][T14537] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 bd b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 196.692319][T14537] RSP: 002b:00007fd2c87e49f8 EFLAGS: 00000202 ORIG_RAX: 0000000000000010 [ 196.700728][T14537] RAX: ffffffffffffffda RBX: 0000000020000080 RCX: 000000000045d427 07:01:03 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = syz_io_uring_setup(0x76d1, &(0x7f0000000040), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x1, 0x0, 0x0, 0x0, 0x0) 07:01:03 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x80, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142, 0x8e}, {&(0x7f0000000180)=""/145, 0x91}, {&(0x7f00000002c0)=""/80, 0x50}, {&(0x7f0000000340)=""/126, 0x7e}, {&(0x7f0000000400)=""/130, 0x82}, {&(0x7f00000004c0)=""/149, 0x95}], 0x6, &(0x7f0000000240)=""/16, 0x10}}], 0x1, 0x0, 0x0) 07:01:03 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/18, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) [ 196.708705][T14537] RDX: 00007fd2c87e4ac0 RSI: 0000000000004c04 RDI: 0000000000000005 [ 196.716683][T14537] RBP: 00007fd2c87e4ca0 R08: 0000000020000098 R09: 0000000000000000 [ 196.724635][T14537] R10: 00000000000001c0 R11: 0000000000000202 R12: 000000000000001c [ 196.732649][T14537] R13: 00007ffdb49f15af R14: 00007fd2c87e59c0 R15: 000000000118cf4c [ 196.783044][T14537] ERROR: Out of memory at tomoyo_realpath_from_path. [ 196.791123][T14528] loop5: p2 < > p3 p4 < > [ 196.796153][T14528] loop5: partition table partially beyond EOD, truncated [ 196.808921][T14528] loop5: p3 start 4276224225 is beyond EOD, truncated [ 196.822727][T14537] loop3: p2 < > p3 p4 < > [ 196.827208][T14537] loop3: partition table partially beyond EOD, truncated [ 196.854962][T14537] loop3: p2 start 25 is beyond EOD, truncated [ 196.861148][T14537] loop3: p3 start 4276224225 is beyond EOD, truncated [ 196.869064][T14537] loop3: p4 size 2 extends beyond EOD, truncated [ 196.902659][T14528] loop5: p2 < > p3 p4 < > [ 196.917897][T14528] loop5: partition table partially beyond EOD, truncated [ 196.925830][T14528] loop5: p3 start 4276224225 is beyond EOD, truncated 07:01:03 executing program 3 (fault-call:0 fault-nth:29): syz_read_part_table(0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff0a0000010000000000ffffff8500e931190000000000000680ffffff82000000e100e2fe87770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 07:01:03 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 07:01:03 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x80, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142, 0x8e}, {&(0x7f0000000180)=""/145, 0x91}, {&(0x7f00000002c0)=""/80, 0x50}, {&(0x7f0000000340)=""/126, 0x7e}, {&(0x7f0000000400)=""/130, 0x82}, {&(0x7f00000004c0)=""/149, 0x95}], 0x6, &(0x7f0000000240)=""/16, 0x10}}], 0x1, 0x0, 0x0) 07:01:03 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/18, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) 07:01:03 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}, {@max_read={'max_read', 0x3d, 0x2f}}, {@max_read={'max_read', 0x3d, 0x3}}]}}) r1 = syz_io_uring_setup(0x76d1, &(0x7f0000000040), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x1, 0x0, 0x0, 0x0, 0x0) [ 197.014556][ T5086] loop5: p2 < > p3 p4 < > [ 197.018980][ T5086] loop5: partition table partially beyond EOD, truncated [ 197.028146][ T5086] loop5: p3 start 4276224225 is beyond EOD, truncated 07:01:03 executing program 5: syz_read_part_table(0x4000080a, 0x1, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff0a0000010000000000ffffff8500e931190000000000000680ffffff82000000e100e2fe87770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 07:01:03 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 07:01:03 executing program 0: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB="2c726f6f746d6f64653dc1f89d4ef61a2ca94543af8fc284be303030018055136a5bc7de20183e86ae963030303030303030303030303009003030302c757365725f69643d00ce07986eba81e5df1d15ddf7d315fb0000", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r1 = syz_io_uring_setup(0x76d1, &(0x7f0000000040), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x1, 0x0, 0x0, 0x0, 0x0) 07:01:03 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/18, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) 07:01:03 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/18, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) [ 197.124794][T14615] FAULT_INJECTION: forcing a failure. [ 197.124794][T14615] name failslab, interval 1, probability 0, space 0, times 0 [ 197.199629][T14615] CPU: 0 PID: 14615 Comm: syz-executor.3 Not tainted 5.9.0-rc4-syzkaller #0 [ 197.208317][T14615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 197.218386][T14615] Call Trace: [ 197.221767][T14615] dump_stack+0x10f/0x19d [ 197.226106][T14615] should_fail+0x23c/0x250 [ 197.230607][T14615] __should_failslab+0x81/0x90 [ 197.235366][T14615] should_failslab+0x5/0x20 [ 197.239860][T14615] slab_pre_alloc_hook+0x20/0xd0 [ 197.244788][T14615] ? tomoyo_encode2+0x1e2/0x350 [ 197.249672][T14615] __kmalloc+0x78/0x310 [ 197.253818][T14615] ? tomoyo_encode2+0x1e2/0x350 [ 197.258660][T14615] tomoyo_encode2+0x1e2/0x350 [ 197.263326][T14615] tomoyo_realpath_from_path+0x36e/0x3c0 [ 197.268985][T14615] tomoyo_path_number_perm+0xc1/0x2d0 [ 197.274356][T14615] ? putname+0xa5/0xc0 [ 197.278421][T14615] ? __rcu_read_unlock+0x4b/0x260 [ 197.283439][T14615] tomoyo_file_ioctl+0x1c/0x20 [ 197.288193][T14615] security_file_ioctl+0x45/0x90 [ 197.293121][T14615] __se_sys_ioctl+0x48/0x140 [ 197.297706][T14615] __x64_sys_ioctl+0x3f/0x50 [ 197.302374][T14615] do_syscall_64+0x39/0x80 [ 197.306782][T14615] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 197.312658][T14615] RIP: 0033:0x45d427 [ 197.316540][T14615] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 bd b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 197.336150][T14615] RSP: 002b:00007fd2c87e49f8 EFLAGS: 00000202 ORIG_RAX: 0000000000000010 07:01:03 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = syz_io_uring_setup(0x76d1, &(0x7f0000000040), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x1, 0x0, 0x0, 0x0, 0x0) 07:01:03 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x68}}, 0x0) [ 197.344561][T14615] RAX: ffffffffffffffda RBX: 0000000020000080 RCX: 000000000045d427 [ 197.352506][T14615] RDX: 00007fd2c87e4ac0 RSI: 0000000000004c04 RDI: 0000000000000005 [ 197.360465][T14615] RBP: 00007fd2c87e4ca0 R08: 0000000020000098 R09: 0000000000000000 [ 197.368407][T14615] R10: 00000000000001c0 R11: 0000000000000202 R12: 000000000000001d [ 197.376362][T14615] R13: 00007ffdb49f15af R14: 00007fd2c87e59c0 R15: 000000000118cf4c [ 197.401334][T14615] ERROR: Out of memory at tomoyo_realpath_from_path. [ 197.460371][ T5086] loop5: p2 < > p3 p4 < > [ 197.464833][ T5086] loop5: partition table partially beyond EOD, truncated [ 197.480771][ T5086] loop5: p3 start 4276224225 is beyond EOD, truncated [ 197.490930][T14615] loop3: p2 < > p3 p4 < > [ 197.497142][T14615] loop3: partition table partially beyond EOD, truncated [ 197.504782][T14615] loop3: p2 start 25 is beyond EOD, truncated 07:01:04 executing program 3 (fault-call:0 fault-nth:30): syz_read_part_table(0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff0a0000010000000000ffffff8500e931190000000000000680ffffff82000000e100e2fe87770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 07:01:04 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/19, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) [ 197.505795][T14636] loop5: p2 < > p3 p4 < > [ 197.511195][T14615] loop3: p3 start 4276224225 is beyond EOD, truncated [ 197.522414][T14615] loop3: p4 size 2 extends beyond EOD, truncated [ 197.530506][T14636] loop5: partition table partially beyond EOD, truncated [ 197.544437][T14636] loop5: p3 start 4276224225 is beyond EOD, truncated 07:01:04 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x68}}, 0x0) 07:01:04 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x10001}}, {@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}, {@allow_other='allow_other'}, {@max_read={'max_read', 0x3d, 0x1f}}]}}) r1 = syz_io_uring_setup(0x76d1, &(0x7f0000000040), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x1, 0x0, 0x0, 0x0, 0x0) 07:01:04 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = signalfd(r1, &(0x7f00000002c0)={[0x9]}, 0x8) ioctl$RTC_EPOCH_READ(r3, 0x8008700d, &(0x7f0000000380)) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=@delchain={0x68, 0x28, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x4, 0xffff}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x38, 0x2, [@TCA_BASIC_ACT={0x34, 0x3, [@m_mirred={0x30, 0x0, 0x0, 0x0, {{0xb, 0x1, 'mirred\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x68}}, 0x0) getsockopt$netrom_NETROM_T1(r4, 0x103, 0x1, &(0x7f0000000140), &(0x7f0000000180)=0x4) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r6 = syz_io_uring_setup(0x76d1, &(0x7f0000000040), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) pipe2(&(0x7f00000003c0), 0x4800) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, r8, &(0x7f00000000c0)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd_index=0x3, 0x46, 0x400, 0x9e3, 0x2, 0x0, {0x3, r9}}, 0x0) io_uring_enter(r6, 0x1, 0x0, 0x0, 0x0, 0x0) [ 197.645319][T14636] loop5: p2 < > p3 p4 < > [ 197.649790][T14636] loop5: partition table partially beyond EOD, truncated [ 197.675151][T14636] loop5: p3 start 4276224225 is beyond EOD, truncated [ 197.692577][T14695] FAULT_INJECTION: forcing a failure. [ 197.692577][T14695] name failslab, interval 1, probability 0, space 0, times 0 [ 197.714527][T14695] CPU: 1 PID: 14695 Comm: syz-executor.3 Not tainted 5.9.0-rc4-syzkaller #0 [ 197.723213][T14695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 197.733249][T14695] Call Trace: [ 197.736513][T14695] dump_stack+0x10f/0x19d [ 197.740894][T14695] should_fail+0x23c/0x250 [ 197.745363][T14695] __should_failslab+0x81/0x90 [ 197.750114][T14695] should_failslab+0x5/0x20 [ 197.754595][T14695] slab_pre_alloc_hook+0x20/0xd0 [ 197.759560][T14695] kmem_cache_alloc_trace+0x54/0x2d0 [ 197.764823][T14695] ? blk_add_partitions+0xb0/0xc60 [ 197.769920][T14695] blk_add_partitions+0xb0/0xc60 [ 197.774838][T14695] ? disk_part_iter_exit+0x39/0x50 [ 197.779947][T14695] ? blk_drop_partitions+0x1ab/0x1e0 [ 197.785219][T14695] bdev_disk_changed+0x270/0x320 [ 197.790176][T14695] loop_set_status+0x750/0x7d0 [ 197.794957][T14695] lo_ioctl+0x757/0x1190 [ 197.799216][T14695] ? blkdev_common_ioctl+0xaae/0x10b0 [ 197.804572][T14695] ? putname+0xa5/0xc0 [ 197.808803][T14695] ? lo_release+0x130/0x130 [ 197.813298][T14695] blkdev_ioctl+0x1cf/0x410 [ 197.817789][T14695] block_ioctl+0x6d/0x80 [ 197.822020][T14695] ? blkdev_iopoll+0x80/0x80 [ 197.826590][T14695] __se_sys_ioctl+0xcb/0x140 [ 197.831155][T14695] __x64_sys_ioctl+0x3f/0x50 [ 197.835735][T14695] do_syscall_64+0x39/0x80 [ 197.840124][T14695] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 197.845986][T14695] RIP: 0033:0x45d427 [ 197.849891][T14695] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 bd b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 197.869476][T14695] RSP: 002b:00007fd2c87e49f8 EFLAGS: 00000202 ORIG_RAX: 0000000000000010 [ 197.877905][T14695] RAX: ffffffffffffffda RBX: 0000000020000080 RCX: 000000000045d427 [ 197.885854][T14695] RDX: 00007fd2c87e4ac0 RSI: 0000000000004c04 RDI: 0000000000000005 [ 197.893803][T14695] RBP: 00007fd2c87e4ca0 R08: 0000000020000098 R09: 0000000000000000 [ 197.901851][T14695] R10: 00000000000001c0 R11: 0000000000000202 R12: 000000000000001e [ 197.909949][T14695] R13: 00007ffdb49f15af R14: 00007fd2c87e59c0 R15: 000000000118cf4c 07:01:04 executing program 5: syz_read_part_table(0x4000080b, 0x1, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff0a0000010000000000ffffff8500e931190000000000000680ffffff82000000e100e2fe87770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 07:01:04 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/19, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) 07:01:04 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x68}}, 0x0) 07:01:04 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x6c, 0x0, 0x5, 0x2, 0x8, 0x1f, 0x7f}, &(0x7f0000000140)={0xc595, 0x1, 0x2, 0x1ff, 0x70d, 0x0, 0x634, 0x800}, &(0x7f0000000180)={0x713, 0x1f, 0x3, 0x7, 0x4, 0x4, 0x800, 0x1}, &(0x7f0000000200)={r1, r2+60000000}, &(0x7f0000000280)={&(0x7f0000000240)={[0x10001]}, 0x8}) r3 = syz_io_uring_setup(0x76d1, &(0x7f0000000040), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(r3, 0x1, 0x0, 0x0, 0x0, 0x0) 07:01:04 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) 07:01:04 executing program 3 (fault-call:0 fault-nth:31): syz_read_part_table(0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff0a0000010000000000ffffff8500e931190000000000000680ffffff82000000e100e2fe87770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) [ 197.955779][ T5086] loop5: p2 < > p3 p4 < > [ 197.960208][ T5086] loop5: partition table partially beyond EOD, truncated [ 197.982340][ T5086] loop5: p3 start 4276224225 is beyond EOD, truncated 07:01:04 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/19, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) 07:01:04 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) 07:01:04 executing program 4: syz_read_part_table(0x4000080a, 0x1, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff0a0000010000000000ffffff8500e931190000000000000680ffffff82000000e100e2fe87770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 07:01:04 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="680000002800310f00"/20, @ANYRES32=r3], 0x68}}, 0x0) 07:01:04 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$CHAR_RAW_PG(r1, 0x401870c8, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000200)={0xd18, 0x1, 0x800, 0x101, 0xe, "a7524858586bbd95cfdcaa055f9ff383b994c9"}) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000040), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x200, 0x0) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcsa\x00', 0x432000, 0x0) bind$xdp(r5, &(0x7f00000001c0)={0x2c, 0x1, 0x0, 0x38, r6}, 0x10) io_uring_enter(r2, 0x1, 0x0, 0x0, 0x0, 0x0) [ 198.112040][T14765] FAULT_INJECTION: forcing a failure. [ 198.112040][T14765] name failslab, interval 1, probability 0, space 0, times 0 [ 198.125449][T14765] CPU: 0 PID: 14765 Comm: syz-executor.3 Not tainted 5.9.0-rc4-syzkaller #0 [ 198.134116][T14765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 198.144174][T14765] Call Trace: [ 198.147447][T14765] dump_stack+0x10f/0x19d [ 198.151783][T14765] should_fail+0x23c/0x250 [ 198.156171][T14765] __should_failslab+0x81/0x90 07:01:04 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) [ 198.161012][T14765] should_failslab+0x5/0x20 [ 198.165496][T14765] slab_pre_alloc_hook+0x20/0xd0 [ 198.170424][T14765] kmem_cache_alloc_node+0x5c/0x280 [ 198.175629][T14765] ? alloc_vmap_area+0x12f/0x1310 [ 198.180645][T14765] ? debug_smp_processor_id+0x18/0x20 [ 198.186002][T14765] ? delay_tsc+0x96/0xe0 [ 198.190233][T14765] alloc_vmap_area+0x12f/0x1310 [ 198.195099][T14765] ? __should_failslab+0x81/0x90 [ 198.200024][T14765] ? kmem_cache_alloc_node_trace+0x170/0x280 [ 198.205988][T14765] ? __get_vm_area_node+0x195/0x2c0 [ 198.211177][T14765] __get_vm_area_node+0x1dc/0x2c0 [ 198.216210][T14765] ? should_fail+0xd6/0x250 [ 198.220702][T14765] __vmalloc_node_range+0xb6/0x530 [ 198.225803][T14765] ? blk_add_partitions+0x142/0xc60 [ 198.230995][T14765] ? kmem_cache_alloc_trace+0x175/0x2d0 [ 198.236531][T14765] ? blk_add_partitions+0x142/0xc60 [ 198.241703][T14765] vzalloc+0x59/0x70 [ 198.245574][T14765] ? blk_add_partitions+0x142/0xc60 [ 198.250751][T14765] blk_add_partitions+0x142/0xc60 [ 198.255758][T14765] ? disk_part_iter_exit+0x39/0x50 [ 198.260846][T14765] ? blk_drop_partitions+0x1ab/0x1e0 [ 198.266107][T14765] bdev_disk_changed+0x270/0x320 [ 198.271028][T14765] loop_set_status+0x750/0x7d0 [ 198.275777][T14765] lo_ioctl+0x757/0x1190 [ 198.280021][T14765] ? blkdev_common_ioctl+0xaae/0x10b0 [ 198.285379][T14765] ? putname+0xa5/0xc0 [ 198.289435][T14765] ? lo_release+0x130/0x130 [ 198.293906][T14765] blkdev_ioctl+0x1cf/0x410 [ 198.298379][T14765] block_ioctl+0x6d/0x80 [ 198.302591][T14765] ? blkdev_iopoll+0x80/0x80 [ 198.307199][T14765] __se_sys_ioctl+0xcb/0x140 [ 198.311760][T14765] __x64_sys_ioctl+0x3f/0x50 [ 198.316325][T14765] do_syscall_64+0x39/0x80 [ 198.320760][T14765] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 198.326683][T14765] RIP: 0033:0x45d427 [ 198.330550][T14765] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 bd b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 198.350193][T14765] RSP: 002b:00007fd2c87e49f8 EFLAGS: 00000202 ORIG_RAX: 0000000000000010 [ 198.358596][T14765] RAX: ffffffffffffffda RBX: 0000000020000080 RCX: 000000000045d427 [ 198.366572][T14765] RDX: 00007fd2c87e4ac0 RSI: 0000000000004c04 RDI: 0000000000000005 [ 198.374537][T14765] RBP: 00007fd2c87e4ca0 R08: 0000000020000098 R09: 0000000000000000 [ 198.382507][T14765] R10: 00000000000001c0 R11: 0000000000000202 R12: 000000000000001f [ 198.390466][T14765] R13: 00007ffdb49f15af R14: 00007fd2c87e59c0 R15: 000000000118cf4c [ 198.409287][T14765] syz-executor.3: vmalloc: allocation failure: 32768 bytes, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 198.427538][ T5086] loop5: p2 < > p3 p4 < > [ 198.427916][T14765] CPU: 0 PID: 14765 Comm: syz-executor.3 Not tainted 5.9.0-rc4-syzkaller #0 [ 198.432184][ T5086] loop5: partition table partially beyond EOD, truncated [ 198.440598][T14765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 198.440602][T14765] Call Trace: [ 198.440626][T14765] dump_stack+0x10f/0x19d [ 198.440645][T14765] warn_alloc+0x105/0x160 [ 198.469576][T14765] __vmalloc_node_range+0x1e0/0x530 [ 198.474765][T14765] ? kmem_cache_alloc_trace+0x175/0x2d0 [ 198.480295][T14765] ? blk_add_partitions+0x142/0xc60 [ 198.485559][T14765] vzalloc+0x59/0x70 [ 198.489468][T14765] ? blk_add_partitions+0x142/0xc60 [ 198.490854][ T5086] loop5: p3 start 4276224225 is beyond EOD, truncated [ 198.494658][T14765] blk_add_partitions+0x142/0xc60 [ 198.494671][T14765] ? disk_part_iter_exit+0x39/0x50 [ 198.494703][T14765] ? blk_drop_partitions+0x1ab/0x1e0 [ 198.494722][T14765] bdev_disk_changed+0x270/0x320 [ 198.521733][T14765] loop_set_status+0x750/0x7d0 [ 198.526483][T14765] lo_ioctl+0x757/0x1190 [ 198.530758][T14765] ? blkdev_common_ioctl+0xaae/0x10b0 [ 198.536115][T14765] ? putname+0xa5/0xc0 [ 198.540172][T14765] ? lo_release+0x130/0x130 [ 198.544721][T14765] blkdev_ioctl+0x1cf/0x410 [ 198.549220][T14765] block_ioctl+0x6d/0x80 [ 198.553455][T14765] ? blkdev_iopoll+0x80/0x80 [ 198.558026][T14765] __se_sys_ioctl+0xcb/0x140 [ 198.562665][T14765] __x64_sys_ioctl+0x3f/0x50 [ 198.567235][T14765] do_syscall_64+0x39/0x80 [ 198.571700][T14765] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 198.577571][T14765] RIP: 0033:0x45d427 [ 198.581449][T14765] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 bd b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 198.601031][T14765] RSP: 002b:00007fd2c87e49f8 EFLAGS: 00000202 ORIG_RAX: 0000000000000010 [ 198.609428][T14765] RAX: ffffffffffffffda RBX: 0000000020000080 RCX: 000000000045d427 [ 198.617382][T14765] RDX: 00007fd2c87e4ac0 RSI: 0000000000004c04 RDI: 0000000000000005 [ 198.625338][T14765] RBP: 00007fd2c87e4ca0 R08: 0000000020000098 R09: 0000000000000000 [ 198.633342][T14765] R10: 00000000000001c0 R11: 0000000000000202 R12: 000000000000001f [ 198.641381][T14765] R13: 00007ffdb49f15af R14: 00007fd2c87e59c0 R15: 000000000118cf4c [ 198.654717][T14765] Mem-Info: [ 198.658197][T14765] active_anon:214 inactive_anon:184179 isolated_anon:0 [ 198.658197][T14765] active_file:6081 inactive_file:41020 isolated_file:0 [ 198.658197][T14765] unevictable:0 dirty:189 writeback:0 [ 198.658197][T14765] slab_reclaimable:9832 slab_unreclaimable:20910 [ 198.658197][T14765] mapped:60741 shmem:5114 pagetables:1306 bounce:0 [ 198.658197][T14765] free:1515261 free_pcp:1018 free_cma:0 [ 198.660180][T14768] loop5: p2 < > p3 p4 < > [ 198.695495][T14765] Node 0 active_anon:856kB inactive_anon:736716kB active_file:24184kB inactive_file:164080kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:242964kB dirty:756kB writeback:0kB shmem:20456kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 464896kB writeback_tmp:0kB kernel_stack:5104kB all_unreclaimable? no [ 198.701168][T14768] loop5: partition table partially beyond EOD, truncated [ 198.735559][T14765] Node 1 active_anon:0kB inactive_anon:0kB active_file:140kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:208kB all_unreclaimable? no [ 198.738077][T14768] loop5: p3 start 4276224225 is beyond EOD, truncated [ 198.766033][T14765] Node 0 DMA free:15904kB min:188kB low:232kB high:276kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15904kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 198.798102][T14776] loop4: p2 < > p3 p4 < > [ 198.802776][T14776] loop4: partition table partially beyond EOD, truncated [ 198.810533][T14776] loop4: p3 start 4276224225 is beyond EOD, truncated [ 198.818039][T14765] lowmem_reserve[]: 0 2848 3555 3555 3555 [ 198.827436][T14765] Node 0 DMA32 free:2215996kB min:34912kB low:43640kB high:52368kB reserved_highatomic:0KB active_anon:80kB inactive_anon:275236kB active_file:1192kB inactive_file:122196kB unevictable:0kB writepending:204kB present:3129332kB managed:2918584kB mlocked:0kB pagetables:1936kB bounce:0kB free_pcp:2296kB local_pcp:1064kB free_cma:0kB [ 198.858645][T14765] lowmem_reserve[]: 0 0 707 707 707 [ 198.865957][T14765] Node 0 Normal free:38240kB min:8672kB low:10840kB high:13008kB reserved_highatomic:0KB active_anon:776kB inactive_anon:461472kB active_file:22992kB inactive_file:41884kB unevictable:0kB writepending:552kB present:786432kB managed:724524kB mlocked:0kB pagetables:3284kB bounce:0kB free_pcp:1780kB local_pcp:1096kB free_cma:0kB [ 198.897649][T14765] lowmem_reserve[]: 0 0 0 0 0 [ 198.902341][T14765] Node 1 Normal free:3799096kB min:46332kB low:57912kB high:69492kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:140kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3870248kB mlocked:0kB pagetables:4kB bounce:0kB free_pcp:112kB local_pcp:112kB free_cma:0kB [ 198.931632][T14765] lowmem_reserve[]: 0 0 0 0 0 [ 198.936338][T14765] Node 0 DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15904kB [ 198.950368][T14765] Node 0 DMA32: 135*4kB (UME) 104*8kB (UME) 148*16kB (UME) 91*32kB (UME) 55*64kB (UM) 43*128kB (UME) 21*256kB (UM) 15*512kB (UME) 8*1024kB (UME) 4*2048kB (UM) 530*4096kB (UM) = 2215996kB [ 198.968749][T14765] Node 0 Normal: 230*4kB (ME) 607*8kB (ME) 541*16kB (ME) 348*32kB (ME) 178*64kB (M) 10*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 38240kB [ 198.986071][T14765] Node 1 Normal: 20*4kB (UME) 6*8kB (UE) 3*16kB (UE) 3*32kB (ME) 2*64kB (UE) 2*128kB (U) 0*256kB 1*512kB (M) 3*1024kB (UME) 1*2048kB (M) 926*4096kB (M) = 3799184kB [ 199.003663][T14765] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 199.013307][T14765] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 199.022616][T14765] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 199.032171][T14765] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 199.041515][T14765] 51878 total pagecache pages [ 199.046977][T14765] 0 pages in swap cache [ 199.051128][T14765] Swap cache stats: add 0, delete 0, find 0/0 [ 199.059428][T14765] Free swap = 0kB 07:01:05 executing program 5: syz_read_part_table(0x4000080c, 0x1, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff0a0000010000000000ffffff8500e931190000000000000680ffffff82000000e100e2fe87770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 07:01:05 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r0 = syz_io_uring_setup(0x76d4, &(0x7f0000000040)={0x0, 0x0, 0x10, 0x0, 0xdd}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)) syz_io_uring_submit(r1, 0x0, &(0x7f0000000240)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) r2 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x400, 0x1000) ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000280)) io_uring_enter(r0, 0x1, 0x0, 0x0, 0x0, 0x0) 07:01:05 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) 07:01:05 executing program 4: syz_read_part_table(0x4000080a, 0x1, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff0a0000010000000000ffffff8500e931190000000000000680ffffff82000000e100e2fe87770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 07:01:05 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="680000002800310f00"/20, @ANYRES32=r3], 0x68}}, 0x0) [ 199.064604][T14765] Total swap = 0kB [ 199.068317][T14765] 1965979 pages RAM [ 199.082400][T14765] 0 pages HighMem/MovableOnly [ 199.102979][T14765] 83664 pages reserved [ 199.116437][T14825] __nla_validate_parse: 28 callbacks suppressed [ 199.116445][T14825] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 199.133177][T14765] 0 pages cma reserved [ 199.139407][T14825] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.2'. [ 199.142918][T14820] loop4: p2 < > p3 p4 < > [ 199.154943][T14820] loop4: partition table partially beyond EOD, truncated 07:01:05 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff0a0000010000000000ffffff8500e931190000000000000680ffffff82000000e100e2fe87770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 07:01:05 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) 07:01:05 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="680000002800310f00"/20, @ANYRES32=r3], 0x68}}, 0x0) 07:01:05 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = syz_io_uring_setup(0x76d1, &(0x7f0000000040), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) setsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000140)=@assoc_value={0x0, 0x9}, 0x8) io_uring_enter(r1, 0x1, 0x0, 0x0, 0x0, 0x0) [ 199.168177][T14820] loop4: p3 start 4276224225 is beyond EOD, truncated 07:01:05 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) [ 199.237063][ T5086] loop5: p2 < > p3 p4 < > [ 199.241564][ T5086] loop5: partition table partially beyond EOD, truncated [ 199.241856][T14845] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 199.260503][ T5086] loop5: p3 start 4276224225 is beyond EOD, truncated [ 199.266714][T14845] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.2'. [ 199.277620][T14824] loop5: p2 < > p3 p4 < > 07:01:05 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="680000002800310f00"/20, @ANYRES32=r3, @ANYBLOB], 0x68}}, 0x0) [ 199.282313][T14824] loop5: partition table partially beyond EOD, truncated [ 199.289806][T14824] loop5: p3 start 4276224225 is beyond EOD, truncated 07:01:05 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) [ 199.417960][T14883] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 199.456734][T14883] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.2'. [ 199.466939][T14824] loop5: p2 < > p3 p4 < > [ 199.471392][T14824] loop5: partition table partially beyond EOD, truncated [ 199.488279][T14824] loop5: p3 start 4276224225 is beyond EOD, truncated [ 199.502360][T14886] loop3: p2 < > p3 p4 < > [ 199.506834][T14886] loop3: partition table partially beyond EOD, truncated [ 199.514106][T14886] loop3: p2 start 25 is beyond EOD, truncated [ 199.520187][T14886] loop3: p3 start 4276224225 is beyond EOD, truncated [ 199.526990][T14886] loop3: p4 size 2 extends beyond EOD, truncated [ 199.554715][ T5086] loop5: p2 < > p3 p4 < > [ 199.559196][ T5086] loop5: partition table partially beyond EOD, truncated 07:01:06 executing program 5: syz_read_part_table(0x4000080d, 0x1, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff0a0000010000000000ffffff8500e931190000000000000680ffffff82000000e100e2fe87770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 07:01:06 executing program 0: openat$vfio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vfio/vfio\x00', 0x480, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c00813013776ad1df33e79a3c865f4619883028dfd9c7193b93e81e65da4a46179d2ac7c7f74f461d1c0c74a18a0193323dd106ce57229ba4e8b1e33373abc253e4e2d55e01264e9747cf429b927fef4701fff15e84a194647231fa6b36ce73cd4ae36abd71b30a2c4743a62b42bbf08170d3f6ea403af69290d7d742c4dc4806d6ee08742f7ddbb4a059941107cbd1a7bc6c5471daf14c0ae860c6c355637d5a90fd90"]) r1 = syz_io_uring_setup(0x76d1, &(0x7f0000000040), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x1, 0x0, 0x0, 0x0, 0x0) 07:01:06 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x80, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142, 0x8e}, {&(0x7f0000000180)=""/145, 0x91}, {&(0x7f00000002c0)=""/80, 0x50}, {&(0x7f0000000340)=""/126, 0x7e}, {&(0x7f0000000400)=""/130, 0x82}, {&(0x7f00000004c0)=""/149, 0x95}], 0x6}}], 0x2, 0x0, 0x0) 07:01:06 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 07:01:06 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="680000002800310f00"/20, @ANYRES32=r3, @ANYBLOB], 0x68}}, 0x0) [ 199.567994][ T5086] loop5: p3 start 4276224225 is beyond EOD, truncated [ 199.599417][T14909] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 07:01:06 executing program 3: syz_read_part_table(0x2, 0x1, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff0a0000010000000000ffffff8500e931190000000000000680ffffff82000000e100e2fe87770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 07:01:06 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 07:01:06 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x94080d, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = syz_io_uring_setup(0x76d1, &(0x7f0000000040), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x1, 0x0, 0x0, 0x0, 0x0) 07:01:06 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="680000002800310f00"/20, @ANYRES32=r3, @ANYBLOB="00000000045eb690b8ec354b6fcd8b2610004ff7cfffff000000000a0001006261736d630100003800020034000300300000000b0001006d6972720500000000000000000006000c00abff00000000000000005ac919d246b303b4ac95b4382a41c0c734f28506eaa12a2a82325ac07e0bc5690ca6ecf70c5b43d0102b230cb9578b313b4b49bd344f5f1a6a26d85d1b510e8ba6487fc2e1910c71bc9ed12694bc76975ff9e54fe89df0df5f499bf0dd083e650cb73d18c27979d9c4ac5ad15911c2090ea17088d91fc5879e9ac3ce0b77d28b28eede074139eb7d4a54aaad6263da14daeba8c3bff0df46ccac00"/252], 0x68}}, 0x0) 07:01:06 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="680000002800310f00"/20, @ANYRES32=r3, @ANYBLOB], 0x68}}, 0x0) [ 199.641796][T14909] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.2'. 07:01:06 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) [ 199.718805][T14935] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 199.748982][T14942] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 07:01:06 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="680000002800310f00"/20, @ANYRES32=r3, @ANYBLOB="00000000045eb690b8ec354b6fcd8b2610004ff7cfffff000000000a0001006261736d630100003800020034000300300000000b0001006d6972720500000000000000000006000c00abff00000000000000005ac919d246b303b4ac95b4382a41c0c734f28506eaa12a2a82325ac07e0bc5690ca6ecf70c5b43d0102b23"], 0x68}}, 0x0) [ 199.784759][T14943] loop3: p2 < > p3 p4 < > [ 199.789348][T14943] loop3: partition table partially beyond EOD, truncated [ 199.805349][T14943] loop3: p2 start 25 is beyond EOD, truncated [ 199.811495][T14943] loop3: p3 start 4276224225 is beyond EOD, truncated [ 199.818954][T14943] loop3: p4 size 2 extends beyond EOD, truncated [ 199.852832][ T5086] loop5: p2 < > p3 p4 < > [ 199.857280][ T5086] loop5: partition table partially beyond EOD, truncated [ 199.865268][ T5086] loop5: p3 start 4276224225 is beyond EOD, truncated [ 199.874041][T14945] loop5: p2 < > p3 p4 < > [ 199.878486][T14945] loop5: partition table partially beyond EOD, truncated [ 199.886597][T14945] loop5: p3 start 4276224225 is beyond EOD, truncated [ 200.132879][T14945] loop5: p2 < > p3 p4 < > [ 200.143188][T14945] loop5: partition table partially beyond EOD, truncated [ 200.162133][T14945] loop5: p3 start 4276224225 is beyond EOD, truncated [ 200.170543][ T5086] loop5: p2 < > p3 p4 < > [ 200.175294][ T5086] loop5: partition table partially beyond EOD, truncated 07:01:06 executing program 5: syz_read_part_table(0x4000080e, 0x1, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff0a0000010000000000ffffff8500e931190000000000000680ffffff82000000e100e2fe87770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 07:01:06 executing program 4: syz_read_part_table(0x40000806, 0x1, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff0a0000010000000000ffffff8500e931190000000000000680ffffff82000000e100e2fe87770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 07:01:06 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) setxattr$security_ima(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='security.ima\x00', &(0x7f00000001c0)=@md5={0x1, "149e37504a5f7d28f1f5672d5192be7a"}, 0x11, 0x2) r1 = syz_io_uring_setup(0x76d1, &(0x7f0000000040), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ftruncate(r0, 0x9) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYRESOCT, @ANYRES32=r7, @ANYRES64=r3], 0x48}, 0x1, 0x0, 0x0, 0x1000}, 0x44) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) r8 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vsock\x00', 0x8000, 0x0) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x40, 0x0, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8, 0x1, r8}, {0x8}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x8c1}, 0x80) ioctl$VIDIOC_S_JPEGCOMP(r8, 0x408c563e, &(0x7f0000000380)={0x20, 0x2, 0x1f, "02c8844bb3cf3e7f66870656e6555357cc3c67a44b592cabceca94cf2bc6a14590a80c529c402febc7a59dbee7b0c1cff15e43207afc7ccb3db5f07c", 0x3c, "b28ece5b69f71357fb6afce9c1022b93e8247fff83bbd94774ba1bb40aa288abd9b5715e7c8929c2fbb6fd6e5c7f57042996604db3ee82f4d9ef9321", 0x10}) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x1, 0x0, 0x0, 0x0, 0x0) 07:01:06 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142, 0x8e}, {&(0x7f0000000180)=""/145, 0x91}, {&(0x7f00000002c0)=""/80, 0x50}, {&(0x7f0000000340)=""/126, 0x7e}, {&(0x7f0000000400)=""/130, 0x82}, {&(0x7f00000004c0)=""/149, 0x95}], 0x6, &(0x7f0000000240)=""/16, 0x10}}], 0x2, 0x0, 0x0) 07:01:06 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="680000002800310f00"/20, @ANYRES32=r3, @ANYBLOB], 0x68}}, 0x0) 07:01:06 executing program 3: syz_read_part_table(0x3, 0x1, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff0a0000010000000000ffffff8500e931190000000000000680ffffff82000000e100e2fe87770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) [ 200.183282][ T5086] loop5: p3 start 4276224225 is beyond EOD, truncated 07:01:06 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142, 0x8e}, {&(0x7f0000000180)=""/145, 0x91}, {&(0x7f00000002c0)=""/80, 0x50}, {&(0x7f0000000340)=""/126, 0x7e}, {&(0x7f0000000400)=""/130, 0x82}, {&(0x7f00000004c0)=""/149, 0x95}], 0x6, &(0x7f0000000240)=""/16, 0x10}}], 0x2, 0x0, 0x0) 07:01:06 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="680000002800310f00"/20, @ANYRES32=r3, @ANYBLOB], 0x68}}, 0x0) 07:01:06 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="66643dc8eaed53f761df8f29db7866913f3966b3331ed8fc3929b39e9ec48c792cbee33a31a7b7f90812067ce7bc368f276bf7a3eaee670281bdcf5469bd4fb424c03b6384a2f309131083c855f8a7ec1fadbf117a7d60efcc9470b7ad8af0afd9c20cc9be5f4ef8eaa8cf0d02611c00"/127, @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c67726f75705f69643dc43079d649950b0ace97a55bdd365cccfd5343a8f7b0f60ea369f2c3a8e685fc41c489baa57d454ec71fb01c884cad3baec6ce71dd9dc59c", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r1 = syz_io_uring_setup(0x76d1, &(0x7f0000000040), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3800000, 0x4010, r1, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x1, 0x0, 0x0, 0x0, 0x0) [ 200.284176][T15009] Unknown ioctl 1082938942 [ 200.297188][T15009] Unknown ioctl 1082938942 [ 200.312850][T15002] loop3: p2 < > p3 p4 < > [ 200.317257][T15002] loop3: partition table partially beyond EOD, truncated [ 200.326574][T15002] loop3: p2 start 25 is beyond EOD, truncated 07:01:06 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142, 0x8e}, {&(0x7f0000000180)=""/145, 0x91}, {&(0x7f00000002c0)=""/80, 0x50}, {&(0x7f0000000340)=""/126, 0x7e}, {&(0x7f0000000400)=""/130, 0x82}, {&(0x7f00000004c0)=""/149, 0x95}], 0x6, &(0x7f0000000240)=""/16, 0x10}}], 0x2, 0x0, 0x0) [ 200.333483][T15002] loop3: p3 start 4276224225 is beyond EOD, truncated [ 200.340235][T15002] loop3: p4 size 2 extends beyond EOD, truncated [ 200.357022][T15003] loop4: p2 < > p3 p4 < > [ 200.361486][T15003] loop4: partition table partially beyond EOD, truncated [ 200.371210][T15003] loop4: p3 start 4276224225 is beyond EOD, truncated 07:01:06 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="680000002800310f00"/20, @ANYRES32=r3, @ANYBLOB], 0x68}}, 0x0) [ 200.410868][T15037] fuse: Bad value for 'fd' [ 200.432651][T15048] fuse: Bad value for 'fd' 07:01:06 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = syz_io_uring_setup(0x76d1, &(0x7f0000000040), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x1, 0x0, 0x0, 0x0, 0x0) ptrace$peek(0x1, 0x0, &(0x7f0000000140)) [ 200.494071][T15040] loop5: p2 < > p3 p4 < > [ 200.498625][T15040] loop5: partition table partially beyond EOD, truncated [ 200.507071][T15040] loop5: p3 start 4276224225 is beyond EOD, truncated 07:01:07 executing program 5: syz_read_part_table(0x4000080f, 0x1, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff0a0000010000000000ffffff8500e931190000000000000680ffffff82000000e100e2fe87770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 07:01:07 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 07:01:07 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x80, 0x0, 0x0, &(0x7f0000000240)=""/16, 0x10}}], 0x2, 0x0, 0x0) 07:01:07 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="680000002800310f00"/20, @ANYRES32=r3, @ANYBLOB="00000000045eb690b8ec354b6fcd8b2610004ff7cfffff000000000a0001006261736d630100003800020034000300300000000b0001006d69727205000000"], 0x68}}, 0x0) 07:01:07 executing program 3: syz_read_part_table(0x4, 0x1, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff0a0000010000000000ffffff8500e931190000000000000680ffffff82000000e100e2fe87770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 07:01:07 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = syz_io_uring_setup(0x76d1, &(0x7f0000000040)={0x0, 0x0, 0x4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000003c0)=0x0, &(0x7f0000000100)=0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$CHAR_RAW_PG(r4, 0x401870c8, 0x0) ioctl$VIDIOC_QUERYSTD(r4, 0x8008563f, &(0x7f0000000140)) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x1, 0x0, 0x0, 0x0, 0x0) setsockopt$packet_buf(r4, 0x107, 0x5, &(0x7f00000002c0)="c9aa43e1129bb591804b2727ac992d5d8c1c45cd034a556dca3ee719f6fd8abc195414c02deb8f0144598ee1ca92d1648d97886c2e7e452878697d6d8741795864ee790044b77ed4002b5a4d8ae5592b9776c1e25c162e18f0bd79c29203277204b286d7cd7cda4a157d114a92a7b694ca354f53164b9a18cafce2b322e03937b0cd8b2663b2a32eeeefe08b42ea25104dcfb33b51974fc906fafb9209de3a0cf877b6817ca347444896d8", 0xab) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000240)={0x0, 0x0}) r6 = syz_io_uring_complete(r2) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r6, 0x404c534a, &(0x7f0000000400)={0x4, 0x0, 0x8000}) setsockopt$bt_l2cap_L2CAP_LM(r4, 0x6, 0x3, &(0x7f0000000380)=0x2f, 0x4) perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x4f, 0x20, 0x81, 0x5, 0x0, 0x2, 0x10000, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x6}, 0x0, 0x0, 0x200, 0x2, 0x2, 0x5, 0x3}, r5, 0x2, r6, 0x2) [ 200.642440][T15040] loop5: p2 < > p3 p4 < > [ 200.646891][T15040] loop5: partition table partially beyond EOD, truncated [ 200.654820][T15040] loop5: p3 start 4276224225 is beyond EOD, truncated [ 200.663590][ T5086] loop5: p2 < > p3 p4 < > [ 200.668032][ T5086] loop5: partition table partially beyond EOD, truncated [ 200.685018][ T5086] loop5: p3 start 4276224225 is beyond EOD, truncated 07:01:07 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = syz_io_uring_setup(0x76d1, &(0x7f0000000040), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x1, 0x0, 0x0, 0x0, 0x0) ptrace$peek(0x1, 0x0, &(0x7f0000000140)) 07:01:07 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x80, 0x0, 0x0, &(0x7f0000000240)=""/16, 0x10}}], 0x2, 0x0, 0x0) 07:01:07 executing program 0: ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f00000001c0)=""/4096) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000180)={0x64, @tick=0x9f7, 0x5, {0x25, 0xfa}, 0x83, 0x2, 0x4}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f00000012c0)=ANY=[@ANYRES64=r0, @ANYRESHEX=r0, @ANYBLOB="2c726f6f746d6f64653d30513030303030303030303030303030302f324e120df22c757365725f69643d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r1 = syz_io_uring_setup(0x76d1, &(0x7f0000000040), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000140)={r0, 0x1, 0xfffffffff0000000, 0x1000000}) io_uring_enter(r1, 0x1, 0x0, 0x0, 0x0, 0x0) r4 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0x0) add_key$user(0x0, &(0x7f0000000180)={'syz', 0x3}, &(0x7f0000000100)='\x00', 0x1, r4) r5 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000001200), &(0x7f0000001240)=0x10, 0x1541480a5ac36fda) statfs(&(0x7f0000001340)='./file0\x00', &(0x7f0000001400)=""/245) ioctl$SIOCPNGETOBJECT(r5, 0x89e0, &(0x7f0000001280)=0x40) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000000080)={'syz', 0x1, 0x10}, &(0x7f0000001fee)='R\trust\xe3cusgrVex:De', r4) r6 = add_key$keyring(&(0x7f0000001380)='keyring\x00', &(0x7f00000013c0)={'syz', 0x2}, 0x0, 0x0, r4) keyctl$read(0xb, r6, &(0x7f00000011c0)=""/40, 0x28) 07:01:07 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="680000002800310f00"/20, @ANYRES32=r3, @ANYBLOB], 0x68}}, 0x0) 07:01:07 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x80, 0x0, 0x0, &(0x7f0000000240)=""/16, 0x10}}], 0x2, 0x0, 0x0) [ 200.792538][T15107] loop3: p2 < > p3 p4 < > [ 200.796965][T15107] loop3: partition table partially beyond EOD, truncated [ 200.810295][T15107] loop3: p2 start 25 is beyond EOD, truncated [ 200.817208][T15119] loop5: p2 < > p3 p4 < > [ 200.821740][T15119] loop5: partition table partially beyond EOD, truncated 07:01:07 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="680000002800310f00"/20, @ANYRES32=r3, @ANYBLOB], 0x68}}, 0x0) [ 200.844974][T15130] fuse: Unknown parameter '' [ 200.853601][T15107] loop3: p3 start 4276224225 is beyond EOD, truncated [ 200.865024][T15119] loop5: p3 start 4276224225 is beyond EOD, truncated [ 200.896682][T15156] fuse: Unknown parameter '' [ 200.896689][T15107] loop3: p4 size 2 extends beyond EOD, truncated [ 201.042485][T15107] loop3: p2 < > p3 p4 < > [ 201.046906][T15107] loop3: partition table partially beyond EOD, truncated [ 201.054444][T15107] loop3: p2 start 25 is beyond EOD, truncated [ 201.060519][T15107] loop3: p3 start 4276224225 is beyond EOD, truncated [ 201.067976][T15107] loop3: p4 size 2 extends beyond EOD, truncated [ 201.075152][T15119] loop5: p2 < > p3 p4 < > [ 201.080734][T15119] loop5: partition table partially beyond EOD, truncated [ 201.088926][T15119] loop5: p3 start 4276224225 is beyond EOD, truncated 07:01:07 executing program 5: syz_read_part_table(0x40000810, 0x1, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff0a0000010000000000ffffff8500e931190000000000000680ffffff82000000e100e2fe87770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 07:01:07 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="680000002800310f00"/20, @ANYRES32=r3, @ANYBLOB], 0x68}}, 0x0) 07:01:07 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="680000002800310f00"/20, @ANYRES32=r3, @ANYBLOB="00000000045eb690b8ec354b6fcd8b2610004ff7cfffff000000000a0001006261736d630100003800020034000300300000000b0001006d6972720500000000000000000006000c00abff00000000000000005ac919d246b303b4ac95b4382a41c0c734f28506eaa12a2a82325ac07e0bc5690ca6ecf70c5b43d0102b230cb9578b313b4b49bd344f5f1a6a26d85d1b510e8ba6487fc2e1910c71bc9ed12694bc76975ff9e54fe89df0df5f499bf0dd083e650cb73d18c27979d9c4ac5ad15911c2090ea17088d91fc5879e9ac3ce0b77d28b28eede074139eb7d4a54aaad6263da14daeba8c3bff0df46ccac00"/252], 0x68}}, 0x0) 07:01:07 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = syz_io_uring_setup(0x76d1, &(0x7f0000000040), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) ioctl$SNDCTL_DSP_GETODELAY(0xffffffffffffffff, 0x80045017, &(0x7f0000000140)) getsockname$packet(r6, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRESOCT=r3, @ANYRES64=r3], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=@delchain={0x68, 0x28, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0x4, 0xffff}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x38, 0x2, [@TCA_BASIC_ACT={0x34, 0x3, [@m_mirred={0x30, 0x0, 0x0, 0x0, {{0xb, 0x1, 'mirred\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x68}}, 0x0) setsockopt$TIPC_GROUP_LEAVE(r6, 0x10f, 0x88) io_uring_enter(r1, 0x1, 0x0, 0x0, 0x0, 0x0) 07:01:07 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x80, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142, 0x8e}, {&(0x7f0000000180)=""/145, 0x91}, {&(0x7f00000002c0)=""/80, 0x50}, {&(0x7f0000000340)=""/126, 0x7e}, {&(0x7f0000000400)=""/130, 0x82}], 0x5, &(0x7f0000000240)=""/16, 0x10}}], 0x2, 0x0, 0x0) 07:01:07 executing program 3: syz_read_part_table(0x5, 0x1, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff0a0000010000000000ffffff8500e931190000000000000680ffffff82000000e100e2fe87770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) [ 201.160862][ T5086] loop5: p2 < > p3 p4 < > [ 201.171214][ T5086] loop5: partition table partially beyond EOD, truncated [ 201.192351][ T5086] loop5: p3 start 4276224225 is beyond EOD, truncated 07:01:07 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000180)=""/145, 0x91}, {&(0x7f00000002c0)=""/80, 0x50}, {&(0x7f0000000340)=""/126, 0x7e}, {&(0x7f0000000400)=""/130, 0x82}, {&(0x7f00000004c0)=""/149, 0x95}], 0x5, &(0x7f0000000240)=""/16, 0x10}}], 0x2, 0x0, 0x0) 07:01:07 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x80, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142, 0x8e}, {&(0x7f0000000180)=""/145, 0x91}, {&(0x7f00000002c0)=""/80, 0x50}, {&(0x7f0000000340)=""/126, 0x7e}, {&(0x7f0000000400)=""/130, 0x82}], 0x5, &(0x7f0000000240)=""/16, 0x10}}], 0x2, 0x0, 0x0) 07:01:07 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="680000002800310f00"/20, @ANYRES32=r3, @ANYBLOB="00000000045eb690b8ec354b6fcd8b2610004ff7cfffff000000000a00010062"], 0x68}}, 0x0) 07:01:07 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = syz_io_uring_setup(0x76d1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=@delchain={0x68, 0x28, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x4, 0xffff}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x38, 0x2, [@TCA_BASIC_ACT={0x34, 0x3, [@m_mirred={0x30, 0x0, 0x0, 0x0, {{0xb, 0x1, 'mirred\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x68}}, 0x0) getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f00000003c0), &(0x7f0000000400)=0x4) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r8, 0x1, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r8, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}, @L2TP_ATTR_MTU={0x6, 0x1c, 0xfff9}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) io_uring_enter(r1, 0x1, 0x0, 0x0, 0x0, 0x0) utime(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000380)={0x1ff, 0x1ff}) 07:01:07 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) [ 201.335549][T15193] loop5: p2 < > p3 p4 < > [ 201.343335][T15193] loop5: partition table partially beyond EOD, truncated [ 201.363729][T15193] loop5: p3 start 4276224225 is beyond EOD, truncated [ 201.367932][T15210] loop3: p2 < > p3 p4 < > 07:01:07 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x80, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142, 0x8e}, {&(0x7f0000000180)=""/145, 0x91}, {&(0x7f00000002c0)=""/80, 0x50}, {&(0x7f0000000340)=""/126, 0x7e}, {&(0x7f0000000400)=""/130, 0x82}], 0x5, &(0x7f0000000240)=""/16, 0x10}}], 0x2, 0x0, 0x0) [ 201.379468][T15210] loop3: partition table partially beyond EOD, truncated [ 201.388632][T15210] loop3: p2 start 25 is beyond EOD, truncated [ 201.394963][T15210] loop3: p3 start 4276224225 is beyond EOD, truncated [ 201.402080][T15210] loop3: p4 size 2 extends beyond EOD, truncated [ 201.408970][ T5086] loop5: p2 < > p3 p4 < > [ 201.413464][ T5086] loop5: partition table partially beyond EOD, truncated [ 201.422748][ T5086] loop5: p3 start 4276224225 is beyond EOD, truncated 07:01:08 executing program 5: syz_read_part_table(0x40000811, 0x1, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff0a0000010000000000ffffff8500e931190000000000000680ffffff82000000e100e2fe87770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 07:01:08 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="680000002800310f00"/20, @ANYRES32=r3, @ANYBLOB='\x00'], 0x68}}, 0x0) 07:01:08 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x80, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142, 0x8e}, {0x0}, {&(0x7f00000002c0)=""/80, 0x50}, {&(0x7f0000000340)=""/126, 0x7e}, {&(0x7f0000000400)=""/130, 0x82}, {&(0x7f00000004c0)=""/149, 0x95}], 0x6, &(0x7f0000000240)=""/16, 0x10}}], 0x2, 0x0, 0x0) 07:01:08 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="4400000024001d0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f1ffffff0000000009000100686673630000000003e756eebe835785af8d51bd2e140002001000020000000000000000000000000058a8adac087be4aa27b97147b10a0299da19"], 0x44}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=@delchain={0x68, 0x28, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x4, 0xffff}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x38, 0x2, [@TCA_BASIC_ACT={0x34, 0x3, [@m_mirred={0x30, 0x0, 0x0, 0x0, {{0xb, 0x1, 'mirred\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x68}}, 0x0) ioctl$sock_SIOCOUTQNSD(r3, 0x894b, &(0x7f0000000140)) syz_io_uring_setup(0x76d1, &(0x7f0000000040), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) accept4$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000300)=0x14, 0x0) syz_io_uring_submit(r5, r6, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) 07:01:08 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x80, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142, 0x8e}, {&(0x7f0000000180)=""/145, 0x91}, {&(0x7f00000002c0)=""/80, 0x50}, {&(0x7f0000000340)=""/126, 0x7e}, {&(0x7f0000000400)=""/130, 0x82}, {0x0}], 0x6, &(0x7f0000000240)=""/16, 0x10}}], 0x2, 0x0, 0x0) [ 201.560999][T15210] loop3: p2 < > p3 p4 < > [ 201.567632][T15210] loop3: partition table partially beyond EOD, truncated [ 201.575007][T15210] loop3: p2 start 25 is beyond EOD, truncated [ 201.581089][T15210] loop3: p3 start 4276224225 is beyond EOD, truncated [ 201.587983][T15210] loop3: p4 size 2 extends beyond EOD, truncated 07:01:08 executing program 3: syz_read_part_table(0x6, 0x1, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff0a0000010000000000ffffff8500e931190000000000000680ffffff82000000e100e2fe87770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 07:01:08 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x80, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142, 0x8e}, {&(0x7f0000000180)=""/145, 0x91}, {&(0x7f00000002c0)=""/80, 0x50}, {&(0x7f0000000340)=""/126, 0x7e}, {&(0x7f0000000400)=""/130, 0x82}, {0x0}], 0x6, &(0x7f0000000240)=""/16, 0x10}}], 0x2, 0x0, 0x0) 07:01:08 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="680000002800310f00"/20, @ANYRES32=r3, @ANYBLOB='\x00'], 0x68}}, 0x0) 07:01:08 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c0001"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) 07:01:08 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = syz_io_uring_setup(0x76d1, &(0x7f0000000040), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=@delchain={0x68, 0x28, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x4, 0xffff}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x38, 0x2, [@TCA_BASIC_ACT={0x34, 0x3, [@m_mirred={0x30, 0x0, 0x0, 0x0, {{0xb, 0x1, 'mirred\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x68}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) dup3(0xffffffffffffffff, r5, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/fib_trie\x00') ioctl$MON_IOCH_MFLUSH(r9, 0x9208, 0x100) io_uring_enter(r1, 0x1, 0x0, 0x0, 0x0, 0x0) 07:01:08 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="680000002800310f00"/20, @ANYRES32=r3, @ANYBLOB='\x00'], 0x68}}, 0x0) 07:01:08 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = syz_io_uring_setup(0x76d1, &(0x7f0000000040), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x1, 0x0, 0x0, 0x0, 0xfffffff5) [ 201.837413][T15313] loop5: p2 < > p3 p4 < > [ 201.842074][T15313] loop5: partition table partially beyond EOD, truncated [ 201.855228][T15313] loop5: p3 start 4276224225 is beyond EOD, truncated [ 201.875035][T15314] loop3: p2 < > p3 p4 < > [ 201.879449][T15314] loop3: partition table partially beyond EOD, truncated [ 201.901613][T15314] loop3: p2 start 25 is beyond EOD, truncated [ 201.914229][T15314] loop3: p3 start 4276224225 is beyond EOD, truncated [ 201.928978][T15314] loop3: p4 size 2 extends beyond EOD, truncated [ 201.936222][T15313] loop5: p2 < > p3 p4 < > [ 201.940669][T15313] loop5: partition table partially beyond EOD, truncated [ 201.960043][T15313] loop5: p3 start 4276224225 is beyond EOD, truncated 07:01:08 executing program 5: syz_read_part_table(0x40000812, 0x1, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff0a0000010000000000ffffff8500e931190000000000000680ffffff82000000e100e2fe87770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 07:01:08 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x80, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142, 0x8e}, {&(0x7f0000000180)=""/145, 0x91}, {&(0x7f00000002c0)=""/80, 0x50}, {&(0x7f0000000340)=""/126, 0x7e}, {&(0x7f0000000400)=""/130, 0x82}, {0x0}], 0x6, &(0x7f0000000240)=""/16, 0x10}}], 0x2, 0x0, 0x0) 07:01:08 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) readlink(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)=""/163, 0xa3) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="dae5c666643d081a9159419a4bd28e0ae7b1a016a9deee267b4d9dad67d96b85580d6b2c3d48bf1614f71ae53090fb3d7b69e529baf38ca0752d6194fc7775c2fe7130b0a11c069dc34dbda60dac20ae36c4f22de2512a508c27a8384870cf4ca1305e", @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r1 = syz_io_uring_setup(0x76d1, &(0x7f0000000040), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)=0x80, &(0x7f0000000180)=@in={0x2, 0x0, @loopback}, 0x0, 0x80000, 0x1}, 0x0) io_uring_enter(r1, 0x1, 0x0, 0x0, 0x0, 0x0) 07:01:08 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x80, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142, 0x8e}, {&(0x7f0000000180)=""/145, 0x91}, {&(0x7f00000002c0)=""/80, 0x50}, {&(0x7f0000000340)=""/126, 0x7e}, {0x0}, {&(0x7f00000004c0)=""/149, 0x95}], 0x6, &(0x7f0000000240)=""/16, 0x10}}], 0x2, 0x0, 0x0) 07:01:08 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="680000002800310f00"/20, @ANYRES32=r3, @ANYBLOB="00000000045eb690b8ec354b6fcd8b2610"], 0x68}}, 0x0) [ 202.080508][T15376] fuse: Unknown parameter 'ÚåÆfd' [ 202.092380][T15314] loop3: p2 < > p3 p4 < > [ 202.096853][T15314] loop3: partition table partially beyond EOD, truncated [ 202.125668][T15314] loop3: p2 start 25 is beyond EOD, truncated [ 202.131794][T15314] loop3: p3 start 4276224225 is beyond EOD, truncated [ 202.164239][T15314] loop3: p4 size 2 extends beyond EOD, truncated [ 202.178822][T15376] fuse: Unknown parameter 'ÚåÆfd' 07:01:08 executing program 3: syz_read_part_table(0x7, 0x1, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff0a0000010000000000ffffff8500e931190000000000000680ffffff82000000e100e2fe87770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 07:01:08 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="680000002800310f00"/20, @ANYRES32=r3, @ANYBLOB='\x00\x00'], 0x68}}, 0x0) 07:01:08 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x80, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142, 0x8e}, {&(0x7f0000000180)=""/145, 0x91}, {&(0x7f00000002c0)=""/80, 0x50}, {&(0x7f0000000340)=""/126, 0x7e}, {&(0x7f00000004c0)=""/149, 0x95}], 0x5, &(0x7f0000000240)=""/16, 0x10}}], 0x2, 0x0, 0x0) 07:01:08 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x80, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142, 0x8e}, {&(0x7f0000000180)=""/145, 0x91}, {&(0x7f00000002c0)=""/80, 0x50}, {&(0x7f0000000340)=""/126, 0x7e}, {&(0x7f0000000400)=""/130, 0x82}, {0x0}], 0x6, &(0x7f0000000240)=""/16, 0x10}}], 0x2, 0x0, 0x0) 07:01:08 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = syz_io_uring_setup(0x76d1, &(0x7f0000000040), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) renameat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00') syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x1, 0x0, 0x0, 0x0, 0x0) 07:01:08 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x80, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142, 0x8e}, {&(0x7f0000000180)=""/145, 0x91}, {&(0x7f00000002c0)=""/80, 0x50}, {&(0x7f0000000340)=""/126, 0x7e}, {&(0x7f00000004c0)=""/149, 0x95}], 0x5, &(0x7f0000000240)=""/16, 0x10}}], 0x2, 0x0, 0x0) 07:01:08 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="680000002800310f00"/20, @ANYRES32=r3, @ANYBLOB='\x00\x00'], 0x68}}, 0x0) [ 202.283291][T15395] loop5: p2 < > p3 p4 < > [ 202.292526][T15395] loop5: partition table partially beyond EOD, truncated [ 202.312363][T15395] loop5: p3 start 4276224225 is beyond EOD, truncated [ 202.403913][T15407] loop3: p2 < > p3 p4 < > [ 202.408361][T15407] loop3: partition table partially beyond EOD, truncated [ 202.416311][T15407] loop3: p2 start 25 is beyond EOD, truncated [ 202.434206][T15407] loop3: p3 start 4276224225 is beyond EOD, truncated [ 202.444111][T15407] loop3: p4 size 2 extends beyond EOD, truncated [ 202.464878][T15395] loop5: p2 < > p3 p4 < > [ 202.477014][T15395] loop5: partition table partially beyond EOD, truncated [ 202.485752][T15395] loop5: p3 start 4276224225 is beyond EOD, truncated 07:01:09 executing program 5: syz_read_part_table(0x40000813, 0x1, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff0a0000010000000000ffffff8500e931190000000000000680ffffff82000000e100e2fe87770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 07:01:09 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x80, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142, 0x8e}, {&(0x7f0000000180)=""/145, 0x91}, {&(0x7f00000002c0)=""/80, 0x50}, {&(0x7f0000000340)=""/126, 0x7e}, {&(0x7f00000004c0)=""/149, 0x95}], 0x5, &(0x7f0000000240)=""/16, 0x10}}], 0x2, 0x0, 0x0) 07:01:09 executing program 4: syz_read_part_table(0x40000811, 0x1, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff0a0000010000000000ffffff8500e931190000000000000680ffffff82000000e100e2fe87770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 07:01:09 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="680000002800310f00"/20, @ANYRES32=r3, @ANYBLOB='\x00\x00'], 0x68}}, 0x0) 07:01:09 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = syz_io_uring_setup(0x76d1, &(0x7f0000000040), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getgid() ioctl$CHAR_RAW_PG(r4, 0x401870c8, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r4, 0xc10c5541, &(0x7f0000000140)={0x9, 0xfff}) io_uring_enter(r1, 0x1, 0x0, 0x0, 0x0, 0x0) 07:01:09 executing program 3: syz_read_part_table(0x8, 0x1, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff0a0000010000000000ffffff8500e931190000000000000680ffffff82000000e100e2fe87770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 07:01:09 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="680000002800310f00"/20, @ANYRES32=r3, @ANYBLOB="00000000045eb690b8ec"], 0x68}}, 0x0) 07:01:09 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x800}}, {@allow_other='allow_other'}]}}) r1 = syz_io_uring_setup(0x76d1, &(0x7f0000000040), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x1, 0x0, 0x0, 0x0, 0x0) 07:01:09 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x80, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142, 0x8e}, {&(0x7f0000000180)=""/145, 0x91}, {&(0x7f00000002c0)=""/80, 0x50}, {&(0x7f0000000340)=""/126, 0x7e}, {0x0}, {&(0x7f00000004c0)=""/149, 0x95}], 0x6, &(0x7f0000000240)=""/16, 0x10}}], 0x2, 0x0, 0x0) [ 202.642333][T15461] loop3: p2 < > p3 p4 < > [ 202.646806][T15461] loop3: partition table partially beyond EOD, truncated [ 202.655815][T15461] loop3: p2 start 25 is beyond EOD, truncated [ 202.663059][T15461] loop3: p3 start 4276224225 is beyond EOD, truncated [ 202.669839][T15461] loop3: p4 size 2 extends beyond EOD, truncated [ 202.722260][T15457] loop4: p2 < > p3 p4 < > [ 202.729408][T15457] loop4: partition table partially beyond EOD, truncated [ 202.755265][T15457] loop4: p3 start 4276224225 is beyond EOD, truncated 07:01:09 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x80, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142, 0x8e}, {&(0x7f0000000180)=""/145, 0x91}, {&(0x7f00000002c0)=""/80, 0x50}, {&(0x7f0000000340)=""/126, 0x7e}, {0x0}, {&(0x7f00000004c0)=""/149, 0x95}], 0x6, &(0x7f0000000240)=""/16, 0x10}}], 0x2, 0x0, 0x0) [ 202.780395][T15494] fuse: blksize only supported for fuseblk 07:01:09 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="680000002800310f00"/20, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00'], 0x68}}, 0x0) 07:01:09 executing program 0: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001600)={&(0x7f00000021c0)={0x13c4, r0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x40}, @TIPC_NLA_SOCK_REF={0x4f, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7fff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3ff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_NET={0x1c}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}]}, @TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NODE={0x150, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xee, 0x3, "bcfa0bbe6d96edc60fc696aafb34cd6fa668e4995344a551188ebc5a25bbba5ae8eaaf388ee8aa13a5c9587a01db7a2c157f6d1a8e6fffa6f024d50ac6b3ab192f12191c2b515aceafe8cac81316e6e137f30e20c706ed6f803978c2ad84725dcbc038b1057850302f5d4eb07f992d232f2b9391dff6565640cbbee78287c44a2dbefff8ae9924a96b404c9c438b95519fbb337f6d0dd774a2f2e099d92ebc6f36022054a49dc38347da90094f8b9c041ca67ae090dc6c72403a0fdddb1b79a3bc25eb5ca7524b7e88242d20793dc6bde3a26a67c9b8c4364465e482310a1040ffcad56d9ced6ff957ee"}, @TIPC_NLA_NODE_ID={0x55, 0x3, "fc20d356a1fd6ddf9ce8afd0d8951e28eb40fe06b8a04f979510f3b3374a51bd221dcb7b9039234efe9a3e4859dd6675436240fa78227e74a55fc2afd89b03091a4f8e3b9a4f803f236c1506e8f86b5157"}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NET={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_NODEID={0x0, 0x3, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x400}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80000001}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x30b}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}]}, @TIPC_NLA_LINK={0xd4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2e2}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xffff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3ea}]}, @TIPC_NLA_NODE={0x10a0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x8e, 0x3, "989bbfd5f0b51e79e27341d36e1cf4852e11820b48825fd0bb4e1b4a17e9bf6555edb05bde27fb527172f5c205d6e74ae2c2e6fcd23ceeab3e52dfb218d5600b7cc9ed14f707da0760fbbb10aa7d8881a26ff6f9788977d3aa5340bada2b54600b3199b4c48d1bafd8519fc5a3fd598422434696a7bb73bef2ec9c71110e2bddd0efcd58f0e7435d500a"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x80}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "17e93706f797183486538273c5c46cb2ac8a8ba7e205750d45f001f0a32dc5568d7170174fd38511db280713b370397059c0e0ac9e3dabaeb940b4e47cd685da6228a48bc96f60c9d5bc5d86418e98b0b05c53ba1ef08c96ee1ee3379997e03b22b0423ac0da58b484d629672af0b612bfc3edf80468c096083857899c288dc68e2236f41f43f2e5de88d5362d3128356ef6879cd7d070c26230fc4711b1cff3eef0282612804d2ec125b57670500c310417978dee8eafc34aa38c7fc5793e6db62beb009a80e782651f8a995cfb27e2554398078d33f09f0ad24095c615e1eed2034f221fe3b9199e3254239c77ee266b43aeed5f613905ef7edcb77c8030de2d34dc103ccaac9c2386a34672d4eaa3adadecf856f4b15feb3dfa8f5936ca5826ec74d9c605f667173ee17908ffc0e6dcff993141c4c04e2555f9232aae0efc123878d3d8f602da39758f73ecaecdf5d4a2615701938fea93844add8c0eb8f03147fe596556c8e1aa6fc7b90fefb5021da0ae1aa0fd5fdfbd2aaafeb7ec789e5d4d384063b41b49aa9d1e98fe83d77e1fc82e83361d9d1e09407b65349f992bacc39f34c62cc415831b56eec88a24a79b25a6e83038c98a08a81081c06d09e72691caa81887296e993b58abf8a7ed7f412548df86c8926a8eaea1ea691749432c6d2c586de321a0fbe8f93be73888d6b1d8d9376c01a69f16706f43cfdac9cdd984180ef8db2b2619e685b7bedc7cebeed7b16491df3aa3959c0f1b1a1d282a5d88d9415861264a14afcb163e32886a1ecae9cd5ee9493dfebff95537fbeb5c58ee0ec40e11b38ea6163c3d817ab9899ace90d4822a3a24af177d5cb9190de4de0ca958ef19c8163d16f80fa2f9c0647bbcefe15fdb640ed2ac5f6ae7d44543738db7feee250e3a08c43e5e6ff15cd15f3ef9d67e0f62d5895f829a6e835e39a6c354f8f297e773da66c6bcf4cc504988ff7ebe2553c3b3346653f085a9c64658de6066c389ed4e60310f3b717680c8aa148ace10d91d31a7f0c5f5d4866d7ca27719682379ad71f263e4cf1b924db83ab4090329dda584d1f7300bedb72c76c6d9ffecb8ba2f68c5cbe7df93db0ccee57012079ca79e76caa6664a30fc493317d9d84ce579629fc21f366c1642ff7d6ef69067754901301d5444912c20205b6d6ded09b11702e76f52e295cd2621579f06db6d264717a30c83cdb8beb259e6bd76decd9f2fc75eaa535df031a4bdbb92ca04ff4da079b35338a651466d51e751ef95b6e656437c4cb325676aa7bb22430cbef9c2af74349002e8680c7ded6f09d811d2cd80ea9c4b19d26f493b7833db071b568b82817bf8254453caadbc81918759e415ed356e22fb2062df3aabe3e706f801642269aa780b30c727ea15de16e354ee822c22c8cfc588c379ab048d44d1fa5085c197b7b16dc9186fb5bef97bdae9d030edf3299f27e5f996115fc79c6dc22f2481443810d64ca74d9cc33360af192a8ec51637b223515ff11d7c8b5860b95e1478e4f04d6409a0845f852ceb9b4ffd4a96e9fc1917902cc9b4f6d23346a55a0b58b71858de96b17096f3fadcb814d349526e318a913a8b953b9e48be6fdb70acd9d35cfbba6e780e5acf1a436c0c5c6074eb8e621e4ee583ced770b23bbdf39f3093413b46095d625503141151d1cd0b763d1a4acc3f6ae2c606883d9aac94fd08a599b3c8768b885620573f85600a6f5498bf91f035e74c8b12383e8168b8bf7afc071a82660737257e1f719e04e727735d716fb6699fb884bb751d10bad3fde502ac275260f747d7e4ab5199c9ede76d34721e7829bde4c0ff47f9fa990e24f4a12790f2176ba25c57b7a5fdd485b811cfa5692011be1dcd656e48ea7d2903acf7bd28771826e65f991e0271c8dcd7c2e9d65432342532d118c0e1f49e78dbf01abaf44a227de3f62bbdac32325d153ac07ce33fbe298d7d65d86beebfb17be7c838d7f1dc6a88df6eb52296bbc1ea0f78957c322685ba0ed73d11d3d381a661a508e3a6b07a05a42944dea0446e0ba11702941ddcd68384aca31aecbff8142219499e1785fe1c3cacc4ff1c684bc3c4674fed11b9a82f4511b3214384aeabe907ebf737417b559e736327d3374f0e03f648bb40ead0aef247c12b3098c7969ba7ed73581e761ca6f3c54d2ee28854e8814dc5f9c1a932c00bc0b36cef556f69e82c9762ccf46aa14290ce53deaefc5962c423b054f7a54e403ebe9efe38a821bc48b19ae739a833ac7c529dd900562674c682b13b92d1eaeddeeffdc14e9e6f7a9b441d4ba3daf0cb949acac5cf66cf19bae2d943b88e43bdc72a6e6257df5972d15330e70bc650b1c58884194e76911f7a5b2951ce87046ac616dbf4d03ace00c6f985d2abe5403ac3d860d01e188f5ebe1f73d37a2ffc765d8b83fa4fc6c2b970e12acf4d6d777e885b2fc0084a8253a4dad8a31a39ba846a34da8c1424962163095c89c702fe60541f2ea0e5229677690a461dc54a2d0f259fe4c7d67fa145318fc49e4c26b2065813fdfda33dd3b5f1bab3c2013c232f3060fac3e091f98135163c854aff53174a4513775fa907287a1dcc4a19807cd98011370b9e28f8607c468ab88b1c236db2ddc38525ab05932cff1b39a0bd63a8c98c0d70d7e658d29b19e3a88269b5953e77b9eaa9bbd2e198146edb3063d938c58e34d9e9c307f7a9acf944e615e6fb63c4fef31b68afffdcf164ee04d92cbff9af06ae1dfa6e4f48f1744f372d21236d37deb8cc9323a554f92eaa057cfd001bb877d9ac0e334a520942f1b6705ab92390bee00f8a873f9db0a0545ccad250ea771be03cf012bb2b95b6422cfaa770a600f09c77249d2c9d9630e143d5da3c7227f3af4647c79f5b10bbc122697472edc5e453d37897a4d94f6b9b21d1d3552145d2f512c5571c540940b2de3ee9e82e4cc84587a4f9486f46cfe4b4901006398ecac22249b0f320b25e489fb7f3e0015449871aa11e411bbd305b677e63e599e2768a1bc052f306841d925647b129f5f86e95c4bf68a59894db8cdb42757649aa670e5a12a4ff79fae06346d2a66a07186ce2d54225cb1b5a01f1ea345525b902c2379c3d25f7b177d99d963786a81196880604436e34d2f92d0620221aff136af92c563b0dbfe97244d185f548919be67d473f7b28ed2c2c4cfa80f92e21e491f215c069fd5892cd97ab1bad7b97d86e906957cd0f8d1755e684ca30646e8682f5c0d6452464262268dbc7830f9d14d3f811c8d6a586bfcee335f01ee0d2fd70c0341996310786031eb80899505bb15005da409519fcf72cac5beb99c2531c08d9dd6a1ec55c52cbcf96e6b3f16425672fb0e4b9c11afe66cf2493cdc61880e51c1f06bbe650d0e05b7d821985bcf896e019c8ee7644adba471fce7976e189efbb4e27bd409dbbd419258b2e59c0bc5c22c7b7623b1e1c4645f9e3c3ac267b3e230a0bcda3a212a5138d0d0ea107037c87e8e2a1d051f6ccb0795bfadf4f341e065fed5d15094eb5a1af70d6b75977cc55a2e8291da5d3584d74355e2e0d1fcfbf660a4672d29a2671320f66f592e6e2850e7e6f69da4af7bb9c85476c7547de1cae64c51d587f8ba41db2eb54d1a6643bc154faea785d54cd6d58c5842b558baca420fb21f78f01bf9aa64bd80362bb51cfbfa1d5cfb726587b83dae93ad3cc3042cb53504591ad6fd855930969540da55001084a62f383ad136bc0ef638c191776f7ac581c2bba28f28e073fb4de6438ef979e60c09f3c7b7d4e556fa701ca8cf2df200bca4dee6c265db762a42e513543f32006b0e48bb9ceb69c34924e871e441068565bd07b8ee5b1d6a3ad7ac5c53dac290ebe5f42017a0b71f33aea7907a3a83594d7d6145e06c00c23d548a3b4ca1e5502ad9e29417cf2e64d0003dedaafb58c2897a0b4bb9447dbc835268cb295a930128d2d9b185b67658bae94a919214ba3661a51239551d40bf07e0bd0e520f1d2faef51ac92c53fcdeb673c9f9191fd62bad4eba2265263a1561f12d2d3eb2049e94e23dcfc3f94d46dbc9555d11139bdfa689c4fd27329ff72c2a86436880fdbe0679a78323a09b90290ec49ce7b96256c70855b5f75977b5e0437852adf4d9d3218ea0ff018116fd93d249e985285c9a5e6c3bdf484169fb120f707a5cd87f91c02f7fa4958bf200b7fad082ea061b97d587cb421a082a8015afa7e3703fed18355c29f9f21b278ef239397e5ccf9937adf9fbbc08394912debd1ca92d0921e7942911d342d8037eeadc504f2db885ff3be82b74fcdab4ca6095d26a59212f0aa45dde5ad9e57f30244744996bd624cd324334028256a086c8f2b1c91fcc31bf55de7029cf04cb45b259c1130d27d06dc48a4f35c039cf7266233914279bb1b078d2c39175cb191af76efd239de32921b8375950f0ba68966539f1b634f80a297445f58eb57bb9574b9a1c4129a4d2d335ff33f96e5265d8ba8f5270b2276809ecac553c9b83a1ba7b390e32a4bda6e95c219aaaa9664e9723cf9756e58f45b985d0d1c39785f00d984ed28497020d83eaeb066d39eecc989608c52592fa8ab1b70dc2ac78d60710c8d7311f52faf57eeaf0feb912e29f12ccd88cc867c6a5953191b1b380fd903382fb65ebd72f09de9c630fe4391e5e2db1dfffb47e5fb8e10d7493b860569dfdff4917c6bb5fb684c7ac16ccb5f74fba07d093a8743e7710a336735ba34975d43570833bf393157f3cb7245085dfd7089a3c951dc4f2780b47a71e6704ee9eaf82a400d41f805e3b2a842e8cd5e3879c7d502a167e20e4520481e8df076703238fbfcb83caef2e7bde967f5aabf63ab14808986e5036d471c840b8505d6b211c4c74886b809853055896ceca52d59913bb98663cf4a94c3bcb99f15ea3f6bd1a50891ca87a715eec435acdf8f6277d1c281e823b0594b003fd827e3a0dc58ee5976aa5aceef55151ca1cb3b9f5f08bf7643139ef042cce26fd9bfff03a29d022e516c211f0c46104017d60f9f4eae8a2430375b2b456b0da0e0c0795602b1f06189262d9ca89e78e78c8b6bdb08ad6a3ad973c87f69877ebd0f1a608e7dd7631e3314ee0681d66150aaee28b84fc6c44915219b035258aa9a85e8a6738895ec1d4fa7bb2c65af1a3f3632c0b31b9a8ff45650e6a053e8b029908ef08624513abe3b1f995eca2ee26a538947b25a7fddc164178eb5ffcae845a4eb04e6f673bed1b191b958630a498fc1786789a1ced973f8598bff73258cbe82c2834856bf09072a8cc04102ddb046314eae2191c8d2254423f419074aad32238d98364bf8ec8a6346fbbefd877e5f3317bdc8c63ae3964e9db67d456ff3dfe2f495f3d97ab07306263ee9cab061a589836996688b0f3f27c6da791368df6d4d330f88fe4e870e115881cb4b1da9bc5047931843cb3b51eddc7f5d4553bae8c3b753f83c7abaf8adea68f82fc0752ecdfaab8eb76f0431a7009a6b71da297a6bc526379253fef4ff74df0df4ef4271ca832b38586a710a1c4aefa128f3bff28971b8c61cfa7a8485d3bb9c9bbc352aeafc594ffb1ff1b7c775a6dc453b3915d188447c4ab8c334ca97d7c7e657bdb3b7e9f462e366fd619a026e0980e4bfc300a7e8b6728cc703b3069a830557d735006a8fe181d086de0accf3a34f47fdf965bf3e2592c301cd21fd60a30cef07969a1937579af60c6c14e92bfe2b44a3036ab81d947bd8ffabdfd556bf0276c57c4cce9ac24d6bb66af969f6887e8e6d1a449f6ea902393118d0f24e818e022c151a2cc271ffcf1109f735"}]}]}, 0x13c4}, 0x1, 0x0, 0x0, 0x24004080}, 0x2000c810) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000040)={0x0, 0x47f4, 0x1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$CHAR_RAW_PG(r5, 0x401870c8, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x8, 0x0, 0x10000}) ioctl$DRM_IOCTL_SG_ALLOC(r5, 0xc0106438, &(0x7f0000000240)={0x81, r6}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x88042, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r8, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r7, &(0x7f0000000240)={@val={0x5, 0xf5}, @val, @eth={@local, @multicast, @val={@void}, {@mpls_uc={0x8847, {[], @ipv6=@udp={0x0, 0x6, "e0ed32", 0x48, 0x11, 0x0, @empty, @remote, {[], {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "f4bd661c4d8d55d9bc8dcc47569e18530fa056b8d186432e", "143e9e3208976908f862fef3b7bcd1a07159704c5f9bb6baa8872fe8fa02c932"}}}}}}}}}, 0x90) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x400040, 0x0) io_uring_enter(r2, 0x1, 0x0, 0x0, 0x0, 0x0) [ 202.823135][T15512] fuse: blksize only supported for fuseblk 07:01:09 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x80, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142, 0x8e}, {&(0x7f0000000180)=""/145, 0x91}, {&(0x7f00000002c0)=""/80, 0x50}, {&(0x7f0000000340)=""/126, 0x7e}, {0x0}, {&(0x7f00000004c0)=""/149, 0x95}], 0x6, &(0x7f0000000240)=""/16, 0x10}}], 0x2, 0x0, 0x0) 07:01:09 executing program 4: syz_read_part_table(0x40000812, 0x1, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff0a0000010000000000ffffff8500e931190000000000000680ffffff82000000e100e2fe87770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 07:01:09 executing program 3: syz_read_part_table(0x9, 0x1, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff0a0000010000000000ffffff8500e931190000000000000680ffffff82000000e100e2fe87770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 07:01:09 executing program 5: syz_read_part_table(0x40000825, 0x1, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff0a0000010000000000ffffff8500e931190000000000000680ffffff82000000e100e2fe87770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 07:01:09 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="680000002800310f00"/20, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00'], 0x68}}, 0x0) 07:01:09 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x80, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142, 0x8e}, {&(0x7f0000000180)=""/145, 0x91}, {&(0x7f00000002c0)=""/80, 0x50}, {&(0x7f0000000400)=""/130, 0x82}, {&(0x7f00000004c0)=""/149, 0x95}], 0x5, &(0x7f0000000240)=""/16, 0x10}}], 0x2, 0x0, 0x0) [ 203.111602][T15544] loop4: p2 < > p3 p4 < > [ 203.118447][T15544] loop4: partition table partially beyond EOD, truncated [ 203.141168][T15544] loop4: p3 start 4276224225 is beyond EOD, truncated [ 203.142501][T15555] loop3: p2 < > p3 p4 < > [ 203.152936][T15555] loop3: partition table partially beyond EOD, truncated 07:01:09 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x80, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142, 0x8e}, {&(0x7f0000000180)=""/145, 0x91}, {&(0x7f00000002c0)=""/80, 0x50}, {&(0x7f0000000400)=""/130, 0x82}, {&(0x7f00000004c0)=""/149, 0x95}], 0x5, &(0x7f0000000240)=""/16, 0x10}}], 0x2, 0x0, 0x0) [ 203.160240][T15555] loop3: p2 start 25 is beyond EOD, truncated [ 203.167146][T15555] loop3: p3 start 4276224225 is beyond EOD, truncated [ 203.174750][T15555] loop3: p4 size 2 extends beyond EOD, truncated 07:01:09 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="680000002800310f00"/20, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00'], 0x68}}, 0x0) 07:01:09 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c7c307737752b4a5ea09b09bfaccd7b6ef47deb170edac4dbbe802f10d8a6c8637d16a4023341af4d040306878a08c4e6a768f42b981708f2c2dccbc6810bffd82bc613cbd87e65d3ddd1a079cfff260433124726480588c826fae8f1ed3801c02f251239180e0b5e61c984b2486cbd45cdaaa1c25f4907cb8ffd6b22bc7f8580b3f91f7353961698fef1e1ecec08712b57e33d79eff1fcddc0c36112a62e9ecdcb075638bdf523eb172a7a9c00"/185, @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r1 = syz_io_uring_setup(0x76d1, &(0x7f0000000040), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x1, 0x0, 0x0, 0x0, 0x0) [ 203.222637][T15556] loop5: p2 < > p3 p4 < > [ 203.227692][T15556] loop5: partition table partially beyond EOD, truncated [ 203.240114][T15556] loop5: p3 start 4276224225 is beyond EOD, truncated 07:01:09 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x80, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142, 0x8e}, {&(0x7f0000000180)=""/145, 0x91}, {&(0x7f00000002c0)=""/80, 0x50}, {&(0x7f0000000400)=""/130, 0x82}, {&(0x7f00000004c0)=""/149, 0x95}], 0x5, &(0x7f0000000240)=""/16, 0x10}}], 0x2, 0x0, 0x0) 07:01:09 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="680000002800310f00"/20, @ANYRES32=r3, @ANYBLOB="00000000045eb6"], 0x68}}, 0x0) 07:01:09 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = syz_io_uring_setup(0x76d1, &(0x7f0000000040), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x1, 0x0, 0x0, 0x0, 0xeffdffff) [ 203.324160][T15598] fuse: Unknown parameter '|0w7u+J^ › ¿¬Í{nô}ëÚÄÛ¾€/ئÈc}¤3A¯M‡ŠÄæ§hô+˜òÂÜËÆ ÿØ+ÆËØ~eÓÝÑ yÏÿ&3G&HˆÈ&úèñí8À/%9 ^aÉ„²Hl½Eͪ¡Â_IËýk"¼…€³ùsS–˜þñáììq+Wã' 07:01:09 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="680000002800310f00"/20, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00'], 0x68}}, 0x0) 07:01:09 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) [ 203.397363][T15611] fuse: Unknown parameter '|0w7u+J^ › ¿¬Í{nô}ëÚÄÛ¾€/ئÈc}¤3A¯M‡ŠÄæ§hô+˜òÂÜËÆ ÿØ+ÆËØ~eÓÝÑ yÏÿ&3G&HˆÈ&úèñí8À/%9 ^aÉ„²Hl½Eͪ¡Â_IËýk"¼…€³ùsS–˜þñáììq+Wã' [ 203.432522][T15556] loop5: p2 < > p3 p4 < > [ 203.437160][T15556] loop5: partition table partially beyond EOD, truncated [ 203.458916][T15556] loop5: p3 start 4276224225 is beyond EOD, truncated 07:01:09 executing program 3: syz_read_part_table(0xa, 0x1, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff0a0000010000000000ffffff8500e931190000000000000680ffffff82000000e100e2fe87770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 07:01:10 executing program 5: syz_read_part_table(0x40000826, 0x1, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff0a0000010000000000ffffff8500e931190000000000000680ffffff82000000e100e2fe87770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 07:01:10 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x80, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142, 0x8e}, {&(0x7f0000000180)=""/145, 0x91}, {&(0x7f00000002c0)=""/80, 0x50}, {0x0}, {&(0x7f0000000400)=""/130, 0x82}, {&(0x7f00000004c0)=""/149, 0x95}], 0x6, &(0x7f0000000240)=""/16, 0x10}}], 0x2, 0x0, 0x0) 07:01:10 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000000140)='fuse\x00', 0x1002002, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id'}}) r1 = syz_io_uring_setup(0x76d1, &(0x7f0000000040), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x1, 0x0, 0x0, 0x0, 0x0) 07:01:10 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = syz_io_uring_setup(0x76d1, &(0x7f0000000040), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x1, 0x0, 0x0, 0x0, 0x40000000) 07:01:10 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="680000002800310f00"/20, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00'], 0x68}}, 0x0) 07:01:10 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x80, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142, 0x8e}, {&(0x7f0000000180)=""/145, 0x91}, {&(0x7f00000002c0)=""/80, 0x50}, {0x0}, {&(0x7f0000000400)=""/130, 0x82}, {&(0x7f00000004c0)=""/149, 0x95}], 0x6, &(0x7f0000000240)=""/16, 0x10}}], 0x2, 0x0, 0x0) 07:01:10 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="680000002800310f00"/20, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00'], 0x68}}, 0x0) 07:01:10 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) 07:01:10 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x80, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142, 0x8e}, {&(0x7f0000000180)=""/145, 0x91}, {&(0x7f00000002c0)=""/80, 0x50}, {0x0}, {&(0x7f0000000400)=""/130, 0x82}, {&(0x7f00000004c0)=""/149, 0x95}], 0x6, &(0x7f0000000240)=""/16, 0x10}}], 0x2, 0x0, 0x0) 07:01:10 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="66643d74bb4d975de43d9c37504e57f5976ea884271e3efcf64cf06774cef20f53258fbd01286bb7d1a6812145abba6327363bdc09bcfce474c9d268c73959f68d34dac0502dd7ae8c8c76c6dda196732c7b14c3cd90f3a2e9360362331108fc13024bb3a99fa74a9cb33970dd43fd4ecdf1156608148d8b083ab586609520b4164745219cb4b67a9db5657ca1b658f1d7a3138fb6eb4b87a423f54307d4c11b", @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r1 = syz_io_uring_setup(0x76d1, &(0x7f0000000040), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e21, @multicast2}}}, &(0x7f0000000280)=0x84) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f00000002c0)={r4, 0x7fff}, &(0x7f0000000300)=0x8) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) io_uring_enter(r1, 0x1, 0x0, 0x0, 0x0, 0x0) 07:01:10 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="680000002800310f00"/20, @ANYRES32=r3, @ANYBLOB="00000000045e"], 0x68}}, 0x0) [ 203.714259][T15670] loop3: p2 < > p3 p4 < > [ 203.718740][T15670] loop3: partition table partially beyond EOD, truncated [ 203.733557][T15670] loop3: p2 start 25 is beyond EOD, truncated [ 203.749571][T15670] loop3: p3 start 4276224225 is beyond EOD, truncated [ 203.759696][T15670] loop3: p4 size 2 extends beyond EOD, truncated [ 203.772512][T15671] loop5: p2 < > p3 p4 < > [ 203.776972][T15671] loop5: partition table partially beyond EOD, truncated [ 203.785140][T15671] loop5: p3 start 4276224225 is beyond EOD, truncated [ 203.805239][T15690] fuse: Bad value for 'fd' [ 203.869456][T15704] fuse: Bad value for 'fd' [ 203.913777][T15670] loop3: p2 < > p3 p4 < > [ 203.925617][T15670] loop3: partition table partially beyond EOD, truncated [ 203.935069][T15670] loop3: p2 start 25 is beyond EOD, truncated [ 203.941130][T15670] loop3: p3 start 4276224225 is beyond EOD, truncated [ 203.950558][T15670] loop3: p4 size 2 extends beyond EOD, truncated 07:01:10 executing program 3: syz_read_part_table(0xb, 0x1, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff0a0000010000000000ffffff8500e931190000000000000680ffffff82000000e100e2fe87770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) [ 203.973749][T15671] loop5: p2 < > p3 p4 < > [ 203.978159][T15671] loop5: partition table partially beyond EOD, truncated [ 203.987696][T15671] loop5: p3 start 4276224225 is beyond EOD, truncated 07:01:10 executing program 5: syz_read_part_table(0x40000848, 0x1, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff0a0000010000000000ffffff8500e931190000000000000680ffffff82000000e100e2fe87770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 07:01:10 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x80, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142, 0x8e}, {&(0x7f0000000180)=""/145, 0x91}, {&(0x7f0000000340)=""/126, 0x7e}, {&(0x7f0000000400)=""/130, 0x82}, {&(0x7f00000004c0)=""/149, 0x95}], 0x5, &(0x7f0000000240)=""/16, 0x10}}], 0x2, 0x0, 0x0) 07:01:10 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) 07:01:10 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="680000002800310f00"/20, @ANYRES32=r3, @ANYBLOB="00000000045e"], 0x68}}, 0x0) 07:01:10 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c67586f014a21dd3d52", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r1 = syz_io_uring_setup(0x76d1, &(0x7f0000000040), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) fchmodat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x11) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x1, 0x0, 0x0, 0x0, 0x0) 07:01:10 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x80, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142, 0x8e}, {&(0x7f0000000180)=""/145, 0x91}, {&(0x7f00000002c0)=""/80, 0x50}, {&(0x7f0000000340)=""/126, 0x7e}, {&(0x7f0000000400)=""/130, 0x82}], 0x5, &(0x7f0000000240)=""/16, 0x10}}], 0x2, 0x0, 0x0) 07:01:10 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x80, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142, 0x8e}, {&(0x7f0000000180)=""/145, 0x91}, {&(0x7f0000000340)=""/126, 0x7e}, {&(0x7f0000000400)=""/130, 0x82}, {&(0x7f00000004c0)=""/149, 0x95}], 0x5, &(0x7f0000000240)=""/16, 0x10}}], 0x2, 0x0, 0x0) [ 204.088650][T15728] fuse: Unknown parameter 'gXoJ!Ý' 07:01:10 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="680000002800310f00"/20, @ANYRES32=r3, @ANYBLOB="00000000045e"], 0x68}}, 0x0) [ 204.152778][T15743] fuse: Unknown parameter 'gXoJ!Ý' [ 204.167912][T15752] __nla_validate_parse: 63 callbacks suppressed [ 204.167929][T15752] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 204.190497][T15752] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.2'. 07:01:10 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x80, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142, 0x8e}, {&(0x7f0000000180)=""/145, 0x91}, {&(0x7f0000000340)=""/126, 0x7e}, {&(0x7f0000000400)=""/130, 0x82}, {&(0x7f00000004c0)=""/149, 0x95}], 0x5, &(0x7f0000000240)=""/16, 0x10}}], 0x2, 0x0, 0x0) 07:01:10 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="680000002800310f00"/20, @ANYBLOB="00000000045eb6"], 0x68}}, 0x0) 07:01:10 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = syz_io_uring_setup(0x76d1, &(0x7f0000000040), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x1, 0x0, 0x0, 0x0, 0x0) dup(r0) [ 204.202488][T15749] loop5: p2 < > p3 p4 < > [ 204.206937][T15749] loop5: partition table partially beyond EOD, truncated [ 204.221827][T15749] loop5: p3 start 4276224225 is beyond EOD, truncated [ 204.266959][T15754] loop3: p2 < > p3 p4 < > [ 204.271938][T15754] loop3: partition table partially beyond EOD, truncated [ 204.280481][T15754] loop3: p2 start 25 is beyond EOD, truncated [ 204.286934][T15754] loop3: p3 start 4276224225 is beyond EOD, truncated [ 204.293840][T15754] loop3: p4 size 2 extends beyond EOD, truncated [ 204.334311][T15773] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 07:01:10 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) [ 204.387294][T15773] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.2'. [ 204.429789][T15749] loop5: p2 < > p3 p4 < > [ 204.438487][T15749] loop5: partition table partially beyond EOD, truncated [ 204.457725][T15749] loop5: p3 start 4276224225 is beyond EOD, truncated 07:01:10 executing program 5: syz_read_part_table(0x4000084c, 0x1, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff0a0000010000000000ffffff8500e931190000000000000680ffffff82000000e100e2fe87770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 07:01:10 executing program 3: syz_read_part_table(0xc, 0x1, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff0a0000010000000000ffffff8500e931190000000000000680ffffff82000000e100e2fe87770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 07:01:10 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x204000, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0xa0000, &(0x7f0000000240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB="2c726f6f746d6f64653d303030303030303030303030303030303030323044b72e47757365725f69643d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',allow_other,blksize=0x0000000000000a00,appraise_type=imasig,func=CREDS_CHECK,subj_user=fuse\x00,\x00']) r1 = syz_io_uring_setup(0x76d1, &(0x7f0000000040), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x1, 0x0, 0x0, 0x0, 0x0) 07:01:10 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x80, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142, 0x8e}, {&(0x7f0000000180)=""/145, 0x91}, {0x0}, {&(0x7f0000000340)=""/126, 0x7e}, {&(0x7f0000000400)=""/130, 0x82}, {&(0x7f00000004c0)=""/149, 0x95}], 0x6, &(0x7f0000000240)=""/16, 0x10}}], 0x2, 0x0, 0x0) 07:01:10 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="680000002800310f00"/20, @ANYBLOB="00000000045eb6"], 0x68}}, 0x0) 07:01:10 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = syz_io_uring_setup(0x76d1, &(0x7f0000000040), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x1, 0x0, 0x0, 0x0, 0x0) dup(r0) 07:01:11 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x80, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142, 0x8e}, {&(0x7f0000000180)=""/145, 0x91}, {0x0}, {&(0x7f0000000340)=""/126, 0x7e}, {&(0x7f0000000400)=""/130, 0x82}, {&(0x7f00000004c0)=""/149, 0x95}], 0x6, &(0x7f0000000240)=""/16, 0x10}}], 0x2, 0x0, 0x0) [ 204.546438][T15808] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 204.574350][T15808] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.2'. 07:01:11 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = syz_io_uring_setup(0x76d1, &(0x7f0000000040), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm_plock\x00', 0x200200, 0x0) ioctl$RTC_RD_TIME(r4, 0x80247009, &(0x7f0000000180)) io_uring_enter(r1, 0x1, 0x0, 0x0, 0x0, 0x0) [ 204.622762][T15805] loop3: p2 < > p3 p4 < > 07:01:11 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="680000002800310f00"/20, @ANYBLOB="00000000045eb6"], 0x68}}, 0x0) 07:01:11 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = syz_io_uring_setup(0x76d1, &(0x7f0000000040), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x1, 0x0, 0xf5ffffff, 0x0, 0x0) 07:01:11 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x80, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142, 0x8e}, {&(0x7f0000000180)=""/145, 0x91}, {0x0}, {&(0x7f0000000340)=""/126, 0x7e}, {&(0x7f0000000400)=""/130, 0x82}, {&(0x7f00000004c0)=""/149, 0x95}], 0x6, &(0x7f0000000240)=""/16, 0x10}}], 0x2, 0x0, 0x0) [ 204.667111][T15805] loop3: partition table partially beyond EOD, truncated [ 204.692255][T15805] loop3: p2 start 25 is beyond EOD, truncated [ 204.698380][T15805] loop3: p3 start 4276224225 is beyond EOD, truncated [ 204.722635][T15837] loop5: p2 < > p3 p4 < > [ 204.729225][T15837] loop5: partition table partially beyond EOD, truncated [ 204.729361][T15805] loop3: p4 size 2 extends beyond EOD, truncated [ 204.738983][T15846] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 204.755851][T15837] loop5: p3 start 4276224225 is beyond EOD, truncated 07:01:11 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="680000002800310f00"/20, @ANYRES32, @ANYBLOB="00000000045eb6"], 0x68}}, 0x0) [ 204.779824][T15846] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.2'. [ 204.850523][T15877] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 204.852500][T15837] loop5: p2 < > p3 p4 < > [ 204.882966][T15837] loop5: partition table partially beyond EOD, truncated [ 204.897145][T15837] loop5: p3 start 4276224225 is beyond EOD, truncated [ 204.900690][T15877] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.2'. 07:01:11 executing program 5: syz_read_part_table(0x40000855, 0x1, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff0a0000010000000000ffffff8500e931190000000000000680ffffff82000000e100e2fe87770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 07:01:11 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030303030303032303030302c757365723e6d0147", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r1 = syz_io_uring_setup(0x76d1, &(0x7f0000000040), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x1, 0x0, 0x0, 0x0, 0x0) 07:01:11 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x80, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142, 0x8e}, {&(0x7f00000002c0)=""/80, 0x50}, {&(0x7f0000000340)=""/126, 0x7e}, {&(0x7f0000000400)=""/130, 0x82}, {&(0x7f00000004c0)=""/149, 0x95}], 0x5, &(0x7f0000000240)=""/16, 0x10}}], 0x2, 0x0, 0x0) 07:01:11 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) 07:01:11 executing program 3: syz_read_part_table(0xd, 0x1, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff0a0000010000000000ffffff8500e931190000000000000680ffffff82000000e100e2fe87770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 07:01:11 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="680000002800310f00"/20, @ANYRES32, @ANYBLOB="00000000045eb6"], 0x68}}, 0x0) 07:01:11 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="680000002800310f00"/20, @ANYRES32, @ANYBLOB="00000000045eb6"], 0x68}}, 0x0) 07:01:11 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x80, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142, 0x8e}, {&(0x7f00000002c0)=""/80, 0x50}, {&(0x7f0000000340)=""/126, 0x7e}, {&(0x7f0000000400)=""/130, 0x82}, {&(0x7f00000004c0)=""/149, 0x95}], 0x5, &(0x7f0000000240)=""/16, 0x10}}], 0x2, 0x0, 0x0) [ 205.004654][T15896] fuse: Unknown parameter 'user>mG00000000000000000000' 07:01:11 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/18, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) 07:01:11 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = syz_io_uring_setup(0x76d1, &(0x7f0000000040), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x1, 0x0, 0x0, 0x0, 0x0) [ 205.059709][T15914] fuse: Unknown parameter 'user>mG00000000000000000000' [ 205.065924][T15902] loop3: p2 < > p3 p4 < > [ 205.071152][T15902] loop3: partition table partially beyond EOD, truncated [ 205.081330][T15902] loop3: p2 start 25 is beyond EOD, truncated [ 205.087499][T15902] loop3: p3 start 4276224225 is beyond EOD, truncated [ 205.094719][T15913] loop5: p2 < > p3 p4 < > 07:01:11 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYRES32=r3, @ANYBLOB="00000000045eb6"], 0x68}}, 0x0) [ 205.107710][T15913] loop5: partition table partially beyond EOD, truncated [ 205.116083][T15902] loop3: p4 size 2 extends beyond EOD, truncated [ 205.126605][T15913] loop5: p3 start 4276224225 is beyond EOD, truncated 07:01:11 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYRES32=r3, @ANYBLOB="00000000045eb6"], 0x68}}, 0x0) [ 205.223722][T15902] loop3: p2 < > p3 p4 < > [ 205.234219][T15902] loop3: partition table partially beyond EOD, truncated [ 205.241359][T15902] loop3: p2 start 25 is beyond EOD, truncated [ 205.247804][T15902] loop3: p3 start 4276224225 is beyond EOD, truncated [ 205.254671][T15902] loop3: p4 size 2 extends beyond EOD, truncated 07:01:11 executing program 5: syz_read_part_table(0x4000085c, 0x1, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff0a0000010000000000ffffff8500e931190000000000000680ffffff82000000e100e2fe87770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 07:01:11 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x80, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142, 0x8e}, {&(0x7f00000002c0)=""/80, 0x50}, {&(0x7f0000000340)=""/126, 0x7e}, {&(0x7f0000000400)=""/130, 0x82}, {&(0x7f00000004c0)=""/149, 0x95}], 0x5, &(0x7f0000000240)=""/16, 0x10}}], 0x2, 0x0, 0x0) 07:01:11 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/18, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) 07:01:11 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = syz_io_uring_setup(0x76d1, &(0x7f0000000040), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4, 0x0, 0x0, 0x0, {0x2}, 0x1}, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r9, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=@delchain={0x68, 0x28, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0x4, 0xffff}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x38, 0x2, [@TCA_BASIC_ACT={0x34, 0x3, [@m_mirred={0x30, 0x0, 0x0, 0x0, {{0xb, 0x1, 'mirred\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x68}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x44, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x3}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r9}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7fffffff, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000080}, 0x10) io_uring_enter(r1, 0x1, 0x0, 0x0, 0x0, 0x0) 07:01:11 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYRES32=r3, @ANYBLOB="00000000045eb6"], 0x68}}, 0x0) 07:01:11 executing program 3: syz_read_part_table(0xe, 0x1, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff0a0000010000000000ffffff8500e931190000000000000680ffffff82000000e100e2fe87770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 07:01:11 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) 07:01:11 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="00000000045eb6"], 0x68}}, 0x0) 07:01:11 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x80, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142, 0x8e}, {0x0}, {&(0x7f00000002c0)=""/80, 0x50}, {&(0x7f0000000340)=""/126, 0x7e}, {&(0x7f0000000400)=""/130, 0x82}, {&(0x7f00000004c0)=""/149, 0x95}], 0x6, &(0x7f0000000240)=""/16, 0x10}}], 0x2, 0x0, 0x0) 07:01:11 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) 07:01:12 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB="2c726f6f746d6f64653d3070303003000000303030303054823fbe8938d24a30287a757365725f69643d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r1 = syz_io_uring_setup(0x76d1, &(0x7f0000000040), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x1, 0x0, 0x2, 0x0, 0x0) [ 205.522716][T15980] loop3: p2 < > p3 p4 < > [ 205.527291][T15980] loop3: partition table partially beyond EOD, truncated [ 205.536946][T15980] loop3: p2 start 25 is beyond EOD, truncated [ 205.558699][T15979] loop5: p2 < > p3 p4 < > [ 205.565344][T15979] loop5: partition table partially beyond EOD, truncated 07:01:12 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="00000000045eb6"], 0x68}}, 0x0) [ 205.575751][T15980] loop3: p3 start 4276224225 is beyond EOD, truncated [ 205.590389][T15980] loop3: p4 size 2 extends beyond EOD, truncated [ 205.598011][T15979] loop5: p3 start 4276224225 is beyond EOD, truncated [ 205.611284][T16012] fuse: Bad value for 'rootmode' [ 205.658344][T16027] fuse: Bad value for 'rootmode' 07:01:12 executing program 5: syz_read_part_table(0x40000860, 0x1, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff0a0000010000000000ffffff8500e931190000000000000680ffffff82000000e100e2fe87770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 07:01:12 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x80, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142, 0x8e}, {0x0}, {&(0x7f00000002c0)=""/80, 0x50}, {&(0x7f0000000340)=""/126, 0x7e}, {&(0x7f0000000400)=""/130, 0x82}, {&(0x7f00000004c0)=""/149, 0x95}], 0x6, &(0x7f0000000240)=""/16, 0x10}}], 0x2, 0x0, 0x0) 07:01:12 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x80, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142, 0x8e}, {0x0}, {&(0x7f00000002c0)=""/80, 0x50}, {&(0x7f0000000340)=""/126, 0x7e}, {&(0x7f0000000400)=""/130, 0x82}, {&(0x7f00000004c0)=""/149, 0x95}], 0x6, &(0x7f0000000240)=""/16, 0x10}}], 0x2, 0x0, 0x0) 07:01:12 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$CHAR_RAW_PG(r1, 0x401870c8, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) r2 = syz_io_uring_setup(0xfc, &(0x7f0000000180)={0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x1, 0x0, 0x0, 0x0, 0x0) 07:01:12 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="00000000045eb6"], 0x68}}, 0x0) 07:01:12 executing program 3: syz_read_part_table(0xf, 0x1, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff0a0000010000000000ffffff8500e931190000000000000680ffffff82000000e100e2fe87770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) [ 205.773019][T15979] loop5: p2 < > p3 p4 < > [ 205.783225][T15979] loop5: partition table partially beyond EOD, truncated [ 205.806174][T15979] loop5: p3 start 4276224225 is beyond EOD, truncated 07:01:12 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280), 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) 07:01:12 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x80, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142, 0x8e}, {0x0}, {&(0x7f00000002c0)=""/80, 0x50}, {&(0x7f0000000340)=""/126, 0x7e}, {&(0x7f0000000400)=""/130, 0x82}, {&(0x7f00000004c0)=""/149, 0x95}], 0x6, &(0x7f0000000240)=""/16, 0x10}}], 0x2, 0x0, 0x0) 07:01:12 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="680000002800310f0000", @ANYRES32=r3, @ANYBLOB="00000000045eb6"], 0x68}}, 0x0) 07:01:12 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="e6395f2c28cb3573b366b31014f721675c33f56b41c14404c4c98cc18ad816278f5189b8831508f060ba78b653"]) r1 = syz_io_uring_setup(0x76d1, &(0x7f0000000040), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)) openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/fuse\x00', 0x2, 0x0) r2 = accept4(0xffffffffffffffff, &(0x7f0000000140)=@isdn, &(0x7f00000001c0)=0x80, 0x80000) r3 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$CHAR_RAW_PG(r3, 0x401870c8, 0x0) ioctl$CHAR_RAW_GETSIZE64(r3, 0x80081272, &(0x7f00000000c0)) sendmsg$nfc_llcp(r2, &(0x7f00000004c0)={&(0x7f0000000200)={0x27, 0x1, 0x0, 0x6, 0xfd, 0x7, "fb6b372e5e11091e9014e845dba93b0aa88fc695d86743e33201a1be3e079ba346503e8bb3153d0c68c6a388075fbef3fd4e1f1ff0dfc48568968260e4c03e", 0x1b}, 0x60, &(0x7f0000000480)=[{&(0x7f0000000280)="0781c8422e3bd5606e5a5c8117aeb5fbf9cfaec919401c948e2e04d47156df3c30adfecabaa3d9d8c3cb453d9f39e78541f6d7a237ca24134029f736afd41a6d508df180fff4322ad874d9ab790661299fe20c6785f764d92a6040bdd2611ac0377ded2b8136de65b7de602b1cf376809e8d183678b234f2982f01ec0e23bf26061b7e8fcf5a5390354f87ad3b52c8aebbd5dd70aa1ba8dcdce275ed3990474b9697e76ca3a56ec6245babfa55351d75", 0xb0}, {&(0x7f0000000340)="598f687b", 0x4}, {&(0x7f0000000380)="0c02c871bd184098c117dbab3f477c8afbeace8e7aaaacb7c2b13e8b397aa1971d3132fc232ab0c2a23d115c6528426ce31477770e04488a13c9afd5006ec9c9ab09a6be1da43c27bb705f38f5da6a6d1e174d5396d2207454543a43d1fa92f6c5e4aad381048b4faf8cf3a097d49b68008e9e235e4c52dbb4895d5a7f7133c2765f636684d36013bf99223e315aca7845aedf4941fb6188f5fc6caa830409fb252e8c2b9c22a3a98a0c17df1cf48ff34874142ac650894c51043be0675727f01129a4209c4209ceaa96913adeb4894ad9ab7b514e3f4cf370ccb02e652c02ed08bd61c132e2a215188f5a59db7721f816", 0xf1}], 0x3, 0x0, 0x0, 0x4010}, 0x0) io_uring_enter(r1, 0x1, 0x0, 0x0, 0x0, 0x0) 07:01:12 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000180)=""/145, 0x91}, {&(0x7f00000002c0)=""/80, 0x50}, {&(0x7f0000000340)=""/126, 0x7e}, {&(0x7f0000000400)=""/130, 0x82}, {&(0x7f00000004c0)=""/149, 0x95}], 0x5, &(0x7f0000000240)=""/16, 0x10}}], 0x2, 0x0, 0x0) [ 205.992402][T16055] loop3: p2 < > p3 p4 < > [ 205.996834][T16055] loop3: partition table partially beyond EOD, truncated [ 206.028393][T16085] fuse: Bad value for 'group_id' 07:01:12 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) [ 206.050750][T16055] loop3: p2 start 25 is beyond EOD, truncated [ 206.059185][T16055] loop3: p3 start 4276224225 is beyond EOD, truncated [ 206.066707][T16077] loop5: p2 < > p3 p4 < > [ 206.071339][T16077] loop5: partition table partially beyond EOD, truncated [ 206.085460][T16098] fuse: Bad value for 'group_id' [ 206.095697][T16055] loop3: p4 size 2 extends beyond EOD, truncated [ 206.108743][T16077] loop5: p3 start 4276224225 is beyond EOD, truncated [ 206.230832][T16077] loop5: p2 < > p3 p4 < > [ 206.235327][T16077] loop5: partition table partially beyond EOD, truncated [ 206.246115][T16077] loop5: p3 start 4276224225 is beyond EOD, truncated 07:01:12 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280), 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) 07:01:12 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000180)=""/145, 0x91}, {&(0x7f00000002c0)=""/80, 0x50}, {&(0x7f0000000340)=""/126, 0x7e}, {&(0x7f0000000400)=""/130, 0x82}, {&(0x7f00000004c0)=""/149, 0x95}], 0x5, &(0x7f0000000240)=""/16, 0x10}}], 0x2, 0x0, 0x0) 07:01:12 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="680000002800310f0000", @ANYRES32=r3, @ANYBLOB="00000000045eb6"], 0x68}}, 0x0) 07:01:12 executing program 3: syz_read_part_table(0x10, 0x1, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff0a0000010000000000ffffff8500e931190000000000000680ffffff82000000e100e2fe87770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 07:01:12 executing program 5: syz_read_part_table(0x40000868, 0x1, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff0a0000010000000000ffffff8500e931190000000000000680ffffff82000000e100e2fe87770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 07:01:12 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="66e22d7708fb448d2caf7844c6e1bee82f6483d392776488", @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r1 = syz_io_uring_setup(0x76d1, &(0x7f0000000040), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x1, 0x0, 0x0, 0x0, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$CHAR_RAW_PG(r4, 0x401870c8, 0x0) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000200)={&(0x7f00000001c0)='./file0\x00', 0x0, 0x10}, 0x10) ioctl$F2FS_IOC_GARBAGE_COLLECT(r5, 0x4004f506, &(0x7f0000000240)) linkat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', r4, &(0x7f0000000180)='./file0\x00', 0x400) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r9, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@delchain={0x68, 0x28, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0xa, 0x9}, {0x4, 0xffff}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x38, 0x2, [@TCA_BASIC_ACT={0x34, 0x3, [@m_mirred={0x30, 0x0, 0x0, 0x0, {{0xb, 0x1, 'mirred\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x68}}, 0x0) bind$l2tp6(r8, &(0x7f0000000280)={0xa, 0x0, 0x7, @local, 0xfff}, 0x20) 07:01:12 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="680000002800310f0000", @ANYRES32=r3, @ANYBLOB="00000000045eb6"], 0x68}}, 0x0) 07:01:12 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000180)=""/145, 0x91}, {&(0x7f00000002c0)=""/80, 0x50}, {&(0x7f0000000340)=""/126, 0x7e}, {&(0x7f0000000400)=""/130, 0x82}, {&(0x7f00000004c0)=""/149, 0x95}], 0x5, &(0x7f0000000240)=""/16, 0x10}}], 0x2, 0x0, 0x0) 07:01:12 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="680000002800310f0000", @ANYRES32=r3, @ANYBLOB="00000000045eb6"], 0x68}}, 0x0) [ 206.362554][T16134] fuse: Unknown parameter 'fâ-wûD' 07:01:12 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="680000002800310f00000000000000", @ANYRES32=r3, @ANYBLOB="00000000045eb6"], 0x68}}, 0x0) [ 206.416549][T16156] fuse: Unknown parameter 'fâ-wûD' [ 206.428952][T16133] loop3: p2 < > p3 p4 < > [ 206.443219][T16133] loop3: partition table partially beyond EOD, truncated [ 206.450349][T16133] loop3: p2 start 25 is beyond EOD, truncated 07:01:12 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB="9b1f00", @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r1 = syz_io_uring_setup(0x76d1, &(0x7f0000000040), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$CHAR_RAW_PG(r4, 0x401870c8, 0x0) statx(r4, &(0x7f0000000140)='./file0\x00', 0x400, 0x20, &(0x7f0000000180)) io_uring_enter(r1, 0x1, 0x0, 0x0, 0x0, 0x0) 07:01:13 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x80, &(0x7f0000000580)=[{0x0}, {&(0x7f0000000180)=""/145, 0x91}, {&(0x7f00000002c0)=""/80, 0x50}, {&(0x7f0000000340)=""/126, 0x7e}, {&(0x7f0000000400)=""/130, 0x82}, {&(0x7f00000004c0)=""/149, 0x95}], 0x6, &(0x7f0000000240)=""/16, 0x10}}], 0x2, 0x0, 0x0) [ 206.504717][T16141] loop5: p2 < > p3 p4 < > [ 206.509223][T16141] loop5: partition table partially beyond EOD, truncated [ 206.533138][T16172] fuse: Unknown parameter '›' 07:01:13 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x80, &(0x7f0000000580)=[{0x0}, {&(0x7f0000000180)=""/145, 0x91}, {&(0x7f00000002c0)=""/80, 0x50}, {&(0x7f0000000340)=""/126, 0x7e}, {&(0x7f0000000400)=""/130, 0x82}, {&(0x7f00000004c0)=""/149, 0x95}], 0x6, &(0x7f0000000240)=""/16, 0x10}}], 0x2, 0x0, 0x0) 07:01:13 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="680000002800310f00000000000000", @ANYRES32=r3, @ANYBLOB="00000000045eb6"], 0x68}}, 0x0) 07:01:13 executing program 4: syz_read_part_table(0xf, 0x1, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff0a0000010000000000ffffff8500e931190000000000000680ffffff82000000e100e2fe87770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) [ 206.572139][T16133] loop3: p3 start 4276224225 is beyond EOD, truncated [ 206.578911][T16133] loop3: p4 size 2 extends beyond EOD, truncated [ 206.593361][T16141] loop5: p3 start 4276224225 is beyond EOD, truncated [ 206.645687][T16180] fuse: Unknown parameter '›' 07:01:13 executing program 3: syz_read_part_table(0x11, 0x1, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff0a0000010000000000ffffff8500e931190000000000000680ffffff82000000e100e2fe87770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 07:01:13 executing program 5: syz_read_part_table(0x4000086c, 0x1, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff0a0000010000000000ffffff8500e931190000000000000680ffffff82000000e100e2fe87770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 07:01:13 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x80, &(0x7f0000000580)=[{0x0}, {&(0x7f0000000180)=""/145, 0x91}, {&(0x7f00000002c0)=""/80, 0x50}, {&(0x7f0000000340)=""/126, 0x7e}, {&(0x7f0000000400)=""/130, 0x82}, {&(0x7f00000004c0)=""/149, 0x95}], 0x6, &(0x7f0000000240)=""/16, 0x10}}], 0x2, 0x0, 0x0) 07:01:13 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB]) r1 = syz_io_uring_setup(0xb1f, &(0x7f0000000140), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x1, 0x0, 0x0, 0x0, 0x0) 07:01:13 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="680000002800310f00000000000000", @ANYRES32=r3, @ANYBLOB="00000000045eb6"], 0x68}}, 0x0) 07:01:13 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x80, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142, 0x8e}, {&(0x7f0000000180)=""/145, 0x91}, {&(0x7f00000002c0)=""/80, 0x50}, {&(0x7f0000000340)=""/126, 0x7e}, {&(0x7f0000000400)=""/130, 0x82}, {&(0x7f00000004c0)=""/149, 0x95}], 0x6}}], 0x2, 0x0, 0x0) 07:01:13 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x80, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142, 0x8e}, {&(0x7f0000000180)=""/145, 0x91}, {&(0x7f00000002c0)=""/80, 0x50}, {&(0x7f0000000340)=""/126, 0x7e}, {&(0x7f0000000400)=""/130, 0x82}, {&(0x7f00000004c0)=""/149, 0x95}], 0x6}}], 0x2, 0x0, 0x0) 07:01:13 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x112) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x40, &(0x7f0000000180)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB="2c926f6f74940caade3d30303030303030303030303030303030303032303030302c757365725f69643d", @ANYRESDEC=0x0, @ANYBLOB="03000000e55ea775705f249884f8ec39f24f0ff03d3b0ed41ce5cfce408a34c14a8d8af534b20dbbb84aa6f4247af16e96af89c352a682180cccb6d8ffc2da7577dd48081e377137fcb16717550e98ccd7ef02f8866d1e4183a31685", @ANYRESOCT=r0, @ANYBLOB=',\x00']) r1 = syz_io_uring_setup(0x76d1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x1, 0x0, 0x0, 0x0, 0x0) r4 = signalfd(r0, &(0x7f0000000280)={[0x80]}, 0x8) ioctl$UI_ABS_SETUP(r4, 0x401c5504, &(0x7f00000002c0)={0xb66, {0x7f5, 0x3, 0x1fc, 0x0, 0x5, 0x80000000}}) [ 206.816875][T16195] loop4: p2 < > p3 p4 < > [ 206.821300][T16195] loop4: partition table partially beyond EOD, truncated [ 206.842239][T16195] loop4: p2 start 25 is beyond EOD, truncated [ 206.848299][T16195] loop4: p3 start 4276224225 is beyond EOD, truncated 07:01:13 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="680000002800310f00"/18, @ANYRES32=r3, @ANYBLOB="00000000045eb6"], 0x68}}, 0x0) [ 206.872099][T16195] loop4: p4 size 2 extends beyond EOD, truncated [ 206.901687][T16240] fuse: Unknown parameter '’oot” ªÞ' 07:01:13 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x80, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142, 0x8e}, {&(0x7f0000000180)=""/145, 0x91}, {&(0x7f00000002c0)=""/80, 0x50}, {&(0x7f0000000340)=""/126, 0x7e}, {&(0x7f0000000400)=""/130, 0x82}, {&(0x7f00000004c0)=""/149, 0x95}], 0x6}}], 0x2, 0x0, 0x0) 07:01:13 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x80, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142, 0x8e}, {&(0x7f0000000180)=""/145, 0x91}, {&(0x7f00000002c0)=""/80, 0x50}, {&(0x7f0000000340)=""/126, 0x7e}, {&(0x7f0000000400)=""/130, 0x82}, {&(0x7f00000004c0)=""/149, 0x95}], 0x6}}], 0x2, 0x0, 0x0) [ 206.926454][T16230] loop5: p2 < > p3 p4 < > [ 206.938545][T16230] loop5: partition table partially beyond EOD, truncated [ 206.965679][T16230] loop5: p3 start 4276224225 is beyond EOD, truncated [ 207.002565][T16234] loop3: p2 < > p3 p4 < > [ 207.007008][T16234] loop3: partition table partially beyond EOD, truncated [ 207.016802][T16247] fuse: Unknown parameter '’oot” ªÞ' 07:01:13 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="680000002800310f00"/18, @ANYRES32=r3, @ANYBLOB="00000000045eb6"], 0x68}}, 0x0) [ 207.083910][T16234] loop3: p2 start 25 is beyond EOD, truncated [ 207.090006][T16234] loop3: p3 start 4276224225 is beyond EOD, truncated [ 207.110565][T16234] loop3: p4 size 2 extends beyond EOD, truncated [ 207.242529][T16234] loop3: p2 < > p3 p4 < > [ 207.246949][T16234] loop3: partition table partially beyond EOD, truncated [ 207.254861][T16234] loop3: p2 start 25 is beyond EOD, truncated [ 207.260966][T16234] loop3: p3 start 4276224225 is beyond EOD, truncated [ 207.268158][T16234] loop3: p4 size 2 extends beyond EOD, truncated 07:01:13 executing program 3: syz_read_part_table(0x12, 0x1, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff0a0000010000000000ffffff8500e931190000000000000680ffffff82000000e100e2fe87770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 07:01:13 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = syz_io_uring_setup(0x76d1, &(0x7f0000000040), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) syz_io_uring_setup(0x5f24, &(0x7f0000000240)={0x0, 0xf34b, 0x8, 0x2, 0x349, 0x0, r1}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f00000002c0)) syz_io_uring_submit(r6, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x5, 0x0, r4, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@l2tp6={0xa, 0x0, 0x80000000, @private2={0xfc, 0x2, [], 0x1}, 0x7a70}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000380)="dba07a6458a8f58fb072b5cf1464639261191543812507bf23a40a79018bb9b0b87b523f58fd63d7f17c61c212", 0x2d}, {&(0x7f00000003c0)="aeaa46e6c1e0d7642bef0c722fb70b299929844090ddd9c00ae4e05f2932f2520175dc9758b2fced792d5e2f91cf5ec3f2657edbc547ef0ed7888bdb09237810be02d17445adf1062a53b7e2326e329c389e10c1aa12fc30bbc5ac617de811729d1c8f261a8031dae376f26c6e", 0x6d}, {&(0x7f0000000440)="85d1a31ea2b581625964dd42c9b501d236bcbe967803bdb99652a75e1a0f5ee499f646da4087c962f47625a33d7dd79740b660f1870afc155da9063f7152f6995b642662a889a5ef0e213972993484d70ecfdd82b5eb91e6daa1512f1d1b2cb22a9388d627f07eab2bf9eb36d0405e67c607693c414e30e6a9e4b5a1ed25b84f6849186b73cd82423789e2880f049cb1610b074c9426a984a382779da5", 0x9d}, {&(0x7f0000000500)="847ebf8f19b09d95329dbb2dbba966ccaf63b55024203295eb2f550b1cdaa45676f92aca52fdce376fb5b3cc4dcf2f7a3a4dc75ae05ffaf145d12a1fc8ba4c5af1aca99465a2dda4562d326ba0a2ac25f7c3db3386179cc8d2ecefae594cf10a0fe12fea19dc8b309cc9a9d0aa3e257e4ed575f1b6a77300133905273f", 0x7d}, {&(0x7f0000000580)="c2e33baaad8243ee3cebd2953f45b33581099c3b18e82872cc9aec450b5f94594c315555d7ea69bd96a783fc47bb54c1007c617fd1c02c128fb624a6f6458853d7aa3f3b30ce5663b609b56f858e09f77b3ed8368b63469d81263a30f27d3eda965d7dface33c91cae0f7a550e62f6cf677a4ccb5b089b00210c971c8c28dbdbb79c8516e98556c99a9389c2d504d4b94b2acc22023d8a44e4f1f218bb78d7416c29c70ef819afe208a1ff6a6f806c0570", 0xb1}, {&(0x7f0000000640)="ef59bdf2dc792eb558067fe8f68d8d1f584337eb6ea6943cad3627fa0538936a753d06099462a06122accb464f7b046b115fd7a6adb34c18e04c9ff280ec79879d15c9055dfbf83a9f090217e4ccb13b39a6b64a889e140e4bb74648b3935881589f896d41f4ce050372e1ebd392ca464e1519e33778fb692e1cd23276db586fd509c54c338913f2bbdc58d993a39b0435522385766cf8ed5bf718be0f9641b83eee88edb65d67d07fe473", 0xab}], 0x6, &(0x7f0000000900)=[{0x28, 0x115, 0x5, "7f91f74f0405ca4927c5b54eeba704fc51338dddf4"}, {0x20, 0x88, 0x4, "00eaab951f3a017a6b306bebc2a7dd01"}, {0xc8, 0x0, 0x0, "3dd028c25919e09e49d565095c280058c6bd42ec8f2890d44f88f7b078729cf57cbe013db9f4b8e0f3feda224601c7da6de544395022b4ab79c4c8ad1a12d339a650905b0b8908000000cb288c44f5c3d602bf69f285a315ecaab6cb856c4d39ba10c8450ace843d65ac27919a3397fb1bb2bddcc9971238f55c28bd233643df9b035f6fa7b098d8afafc6515deaddecd0262655b61f27e113a5c6714c61396215dd59bd31e05ba7af099552aca85336be7c943823"}, {0xf0, 0x112, 0x8001, "88f2a7153219f5ac89fe3100e6c792d500ecd5d7422361b1e64c27ef6e87e0ce49b295a7fcc5fcce950caeb48012876045007576d963d795ebd04f0958de213a205a4735e7f9323d250a8c57591e6bdb78001b4097f476fcc6d0343c2645ae684113504f86f7374f9c5453b81472bd0113db8d6695d06f7d7814c3a79dcb616ef7a7193d25dbffd645e7caeba557b82b99684bd4e2cbe5a37113c4423c26fd64d56d2fe95e8b13a12955a525425e29b3e9c5204b8ab67acaf3cc7fd4d21f05a2b0ef6a12f092177188c69dfb2a3fd8413bd5821c72f6e854b3"}], 0x200}, 0x0, 0x8}, 0x0) io_uring_enter(r1, 0x1, 0x0, 0x0, 0x0, 0x0) 07:01:13 executing program 4 (fault-call:5 fault-nth:0): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) 07:01:13 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x80, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142, 0x8e}, {&(0x7f0000000180)=""/145, 0x91}, {&(0x7f00000002c0)=""/80, 0x50}, {&(0x7f0000000340)=""/126, 0x7e}, {&(0x7f0000000400)=""/130, 0x82}, {&(0x7f00000004c0)=""/149, 0x95}], 0x6, &(0x7f0000000240)=""/16, 0x10}}], 0x1, 0x0, 0x0) 07:01:13 executing program 5: syz_read_part_table(0x40000874, 0x1, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff0a0000010000000000ffffff8500e931190000000000000680ffffff82000000e100e2fe87770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 07:01:13 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="680000002800310f00"/18, @ANYRES32=r3, @ANYBLOB="00000000045eb6"], 0x68}}, 0x0) 07:01:13 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) 07:01:13 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="680000002800310f00"/19, @ANYRES32=r3, @ANYBLOB="00000000045eb6"], 0x68}}, 0x0) 07:01:13 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x80, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142, 0x8e}, {&(0x7f0000000180)=""/145, 0x91}, {&(0x7f00000002c0)=""/80, 0x50}, {&(0x7f0000000340)=""/126, 0x7e}, {&(0x7f0000000400)=""/130, 0x82}, {&(0x7f00000004c0)=""/149, 0x95}], 0x6, &(0x7f0000000240)=""/16, 0x10}}], 0x1, 0x0, 0x0) 07:01:13 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) [ 207.473707][T16301] loop5: p2 < > p3 p4 < > [ 207.481470][T16301] loop5: partition table partially beyond EOD, truncated [ 207.507838][T16301] loop5: p3 start 4276224225 is beyond EOD, truncated 07:01:14 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x80, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142, 0x8e}, {&(0x7f0000000180)=""/145, 0x91}, {&(0x7f00000002c0)=""/80, 0x50}, {&(0x7f0000000340)=""/126, 0x7e}, {&(0x7f0000000400)=""/130, 0x82}, {&(0x7f00000004c0)=""/149, 0x95}], 0x6, &(0x7f0000000240)=""/16, 0x10}}], 0x1, 0x0, 0x0) [ 207.524601][T16309] loop3: p2 < > p3 p4 < > [ 207.543908][T16309] loop3: partition table partially beyond EOD, truncated 07:01:14 executing program 1 (fault-call:5 fault-nth:0): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) [ 207.579508][T16309] loop3: p2 start 25 is beyond EOD, truncated [ 207.591452][T16309] loop3: p3 start 4276224225 is beyond EOD, truncated [ 207.603959][T16309] loop3: p4 size 2 extends beyond EOD, truncated [ 207.716149][T16309] loop3: p2 < > p3 p4 < > [ 207.720577][T16309] loop3: partition table partially beyond EOD, truncated [ 207.728039][T16309] loop3: p2 start 25 is beyond EOD, truncated [ 207.736249][T16309] loop3: p3 start 4276224225 is beyond EOD, truncated [ 207.743151][T16309] loop3: p4 size 2 extends beyond EOD, truncated 07:01:14 executing program 3: syz_read_part_table(0x13, 0x1, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff0a0000010000000000ffffff8500e931190000000000000680ffffff82000000e100e2fe87770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 07:01:14 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c67726ff5705f69afe55517866e443d", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r1 = syz_io_uring_setup(0x76d1, &(0x7f0000000040), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) fsetxattr$security_ima(r1, &(0x7f0000000140)='security.ima\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="046c8e987387d6"], 0xc, 0x3) lremovexattr(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=@known='com.apple.FinderInfo\x00') syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) connect$phonet_pipe(0xffffffffffffffff, &(0x7f0000000240)={0x23, 0x6, 0x7f, 0x81}, 0x10) io_uring_enter(r1, 0x1, 0x0, 0x0, 0x0, 0x0) 07:01:14 executing program 5: syz_read_part_table(0x4000087a, 0x1, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff0a0000010000000000ffffff8500e931190000000000000680ffffff82000000e100e2fe87770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 07:01:14 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) 07:01:14 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="680000002800310f00"/19, @ANYRES32=r3, @ANYBLOB="00000000045eb6"], 0x68}}, 0x0) 07:01:14 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x4, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) 07:01:14 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="680000002800310f00"/19, @ANYRES32=r3, @ANYBLOB="00000000045eb6"], 0x68}}, 0x0) 07:01:14 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) [ 207.833569][T16367] fuse: Unknown parameter 'groõp_i¯åU†nD' 07:01:14 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x10, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) [ 207.884130][T16383] fuse: Unknown parameter 'groõp_i¯åU†nD' [ 207.902406][T16366] loop5: p2 < > p3 p4 < > [ 207.906926][T16366] loop5: partition table partially beyond EOD, truncated [ 207.918556][T16366] loop5: p3 start 4276224225 is beyond EOD, truncated 07:01:14 executing program 2 (fault-call:7 fault-nth:0): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="680000002800310f00"/20, @ANYRES32=r3, @ANYBLOB="00000000045eb6"], 0x68}}, 0x0) 07:01:14 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x4, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) 07:01:14 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = syz_io_uring_setup(0x76d1, &(0x7f0000000040), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) r4 = syz_mount_image$f2fs(&(0x7f0000000140)='f2fs\x00', &(0x7f0000000180)='./file1\x00', 0x3, 0x6, &(0x7f0000000500)=[{&(0x7f00000001c0)="7e15036aaa79a51513819cac8debe6e9408dc79c0bdc3936e1b0ce63e628d196e00b95eda0ed", 0x26, 0x8}, {&(0x7f0000000200)="8e5f85318d456bfe528457b1d0d44f21a7265222c74b705eed9bf2df02905d0f8f91af547703a224b895b8f0ced1a38b91191735a6b2d0cd9c4dc82e3624069a253127203a198c883e047aa3846a16d098c3a06d4dcea7856234bc46ea540dc506889256421568", 0x67, 0x6}, {&(0x7f0000000280)="561f1d7149060c459f3670f2873eaea7af6a33fe7ac8f108b6c8", 0x1a, 0x4}, {&(0x7f00000002c0)="1c54164dd4b61b48a5c1d0da4429663720da19f5ba05013e1567d5ebbd6e1c340857a878d46d1426614edd6390546940360d896e9b595a2b7cdb8b3db79632f1fe2ecef811834ff18277f0ec92e38a7f39eec3428d14e673e7238d68bdb04cfd1a8593ff27", 0x65, 0x80}, {&(0x7f0000000340)="07868e7f911d6bc3d67a911201e51ee442a45d3cfb8e6f9019590c28a82a7df42ffd020b6d479eac7ec53b51b91bc6b12196ffbf7efcc2440a1b13ac7f33b31a0ea9e5c7679b33a79d9a2481b7257963c7afa6b66439c9764cc15a156b6801b9eb0174ddb1bc67a1460e1ae5a602b5a9dd31e197916883c07071d6348b4752a3813810c6ab67", 0x86, 0xca}, {&(0x7f0000000400)="5978a6ba3c9d196c7266a2f4d1c3dda46eff42cffe9183c0d38c74e70f5c12db1c30f02c7a0d7662499d74abeb0ae5294eb4b1b2a94882a47df7fa1ab78ca644aee99c52dbfd3854f071e199c8a5613c3de43d55b55b884d5d5a7ab5ae08994043a31f98ba32efe0f393627884d6a3a7cf7e834a4b23191a1b89919a4a8abf4ff6e19c0fe2da53831f43eb359b8d71d261792f5f04fff9e529c3f5f5a50277423f2b0ae6b732ec5ca117283ee067cc9c625eaf81e6a8bf8989e116f74de361e3827ef4d2b75e47a7c8953d8845", 0xcd, 0x7ff}], 0x2, &(0x7f00000005c0)={[{@nolazytime='nolazytime'}, {@quota='quota'}, {@background_gc_sync='background_gc=sync'}], [{@fowner_lt={'fowner<', 0xee01}}, {@fsname={'fsname', 0x3d, 'rootmode'}}, {@seclabel='seclabel'}, {@euid_eq={'euid'}}, {@fsname={'fsname', 0x3d, '.-}'}}]}) fspick(r4, &(0x7f0000000640)='./file0\x00', 0x1) io_uring_enter(r1, 0x1, 0x0, 0x0, 0x0, 0x0) [ 208.015486][T16409] FAULT_INJECTION: forcing a failure. [ 208.015486][T16409] name failslab, interval 1, probability 0, space 0, times 0 [ 208.029476][T16409] CPU: 0 PID: 16409 Comm: syz-executor.2 Not tainted 5.9.0-rc4-syzkaller #0 [ 208.038126][T16409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 208.048184][T16409] Call Trace: [ 208.051461][T16409] dump_stack+0x10f/0x19d [ 208.055845][T16409] should_fail+0x23c/0x250 [ 208.060256][T16409] __should_failslab+0x81/0x90 [ 208.065000][T16409] should_failslab+0x5/0x20 [ 208.069483][T16409] slab_pre_alloc_hook+0x20/0xd0 [ 208.074417][T16409] kmem_cache_alloc_node+0x5c/0x280 [ 208.079608][T16409] ? __alloc_skb+0x97/0x2e0 [ 208.084091][T16409] ? lockref_put_return+0xed/0x140 [ 208.089182][T16409] ? __rcu_read_unlock+0x4b/0x260 [ 208.094229][T16409] __alloc_skb+0x97/0x2e0 [ 208.098558][T16409] ? apparmor_socket_getpeersec_dgram+0x5/0x10 [ 208.104694][T16409] netlink_sendmsg+0x4b1/0x7a0 [ 208.109506][T16409] ? netlink_getsockopt+0x690/0x690 [ 208.114691][T16409] ____sys_sendmsg+0x360/0x4d0 [ 208.119436][T16409] ? import_iovec+0x171/0x1c0 [ 208.124172][T16409] __sys_sendmsg+0x1df/0x260 [ 208.128756][T16409] ? __this_cpu_preempt_check+0x18/0x20 [ 208.134428][T16409] ? vfs_write+0x4d7/0x6f0 [ 208.138838][T16409] ? __fget_light+0x219/0x260 [ 208.143503][T16409] ? check_preemption_disabled+0x51/0x140 [ 208.149208][T16409] ? debug_smp_processor_id+0x18/0x20 [ 208.154556][T16409] __x64_sys_sendmsg+0x42/0x50 [ 208.159312][T16409] do_syscall_64+0x39/0x80 [ 208.163776][T16409] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 208.169664][T16409] RIP: 0033:0x45d5b9 [ 208.173567][T16409] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 208.193156][T16409] RSP: 002b:00007fb20bc41c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 208.201627][T16409] RAX: ffffffffffffffda RBX: 000000000002cf40 RCX: 000000000045d5b9 [ 208.209656][T16409] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000005 [ 208.217607][T16409] RBP: 00007fb20bc41ca0 R08: 0000000000000000 R09: 0000000000000000 [ 208.225641][T16409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 208.233592][T16409] R13: 00007ffe3d19b7cf R14: 00007fb20bc429c0 R15: 000000000118cf4c [ 208.270794][T16394] loop3: p2 < > p3 p4 < > [ 208.276813][T16394] loop3: partition table partially beyond EOD, truncated [ 208.284499][ T5086] loop5: p2 < > p3 p4 < > [ 208.289048][ T5086] loop5: partition table partially beyond EOD, truncated [ 208.290050][T16394] loop3: p2 start 25 is beyond EOD, truncated [ 208.305085][ T5086] loop5: p3 start 4276224225 is beyond EOD, truncated [ 208.305284][T16394] loop3: p3 start 4276224225 is beyond EOD, truncated [ 208.318861][T16394] loop3: p4 size 2 extends beyond EOD, truncated [ 208.330372][T16366] loop5: p2 < > p3 p4 < > [ 208.335291][T16366] loop5: partition table partially beyond EOD, truncated [ 208.343512][T16366] loop5: p3 start 4276224225 is beyond EOD, truncated [ 208.376018][T16421] F2FS-fs (loop0): Unable to read 1th superblock [ 208.382462][T16421] F2FS-fs (loop0): Unable to read 2th superblock 07:01:15 executing program 3: syz_read_part_table(0x25, 0x1, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff0a0000010000000000ffffff8500e931190000000000000680ffffff82000000e100e2fe87770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 07:01:15 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x1c, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) 07:01:15 executing program 2 (fault-call:7 fault-nth:1): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="680000002800310f00"/20, @ANYRES32=r3, @ANYBLOB="00000000045eb6"], 0x68}}, 0x0) 07:01:15 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x10, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) 07:01:15 executing program 5: syz_read_part_table(0x400008b0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff0a0000010000000000ffffff8500e931190000000000000680ffffff82000000e100e2fe87770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 07:01:15 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0xfc, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) 07:01:15 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x1c, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) [ 208.657957][T16453] FAULT_INJECTION: forcing a failure. [ 208.657957][T16453] name failslab, interval 1, probability 0, space 0, times 0 [ 208.678558][T16453] CPU: 1 PID: 16453 Comm: syz-executor.2 Not tainted 5.9.0-rc4-syzkaller #0 [ 208.687229][T16453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 208.697268][T16453] Call Trace: [ 208.700552][T16453] dump_stack+0x10f/0x19d 07:01:15 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x1c00, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) [ 208.704952][T16453] should_fail+0x23c/0x250 [ 208.709376][T16453] __should_failslab+0x81/0x90 [ 208.714150][T16453] should_failslab+0x5/0x20 [ 208.718683][T16453] slab_pre_alloc_hook+0x20/0xd0 [ 208.723616][T16453] kmem_cache_alloc_node_trace+0x61/0x280 [ 208.729327][T16453] ? __kmalloc_node_track_caller+0x30/0x40 [ 208.735113][T16453] ? kmem_cache_alloc_node+0x16b/0x280 [ 208.740560][T16453] ? netlink_sendmsg+0x4b1/0x7a0 [ 208.745488][T16453] __kmalloc_node_track_caller+0x30/0x40 [ 208.751282][T16453] __alloc_skb+0xd3/0x2e0 [ 208.755639][T16453] netlink_sendmsg+0x4b1/0x7a0 [ 208.760379][T16453] ? netlink_getsockopt+0x690/0x690 [ 208.765549][T16453] ____sys_sendmsg+0x360/0x4d0 [ 208.770286][T16453] ? import_iovec+0x171/0x1c0 [ 208.774949][T16453] __sys_sendmsg+0x1df/0x260 [ 208.779608][T16453] ? __this_cpu_preempt_check+0x18/0x20 [ 208.785138][T16453] ? vfs_write+0x4d7/0x6f0 [ 208.789543][T16453] ? __fget_light+0x219/0x260 [ 208.794238][T16453] ? check_preemption_disabled+0x51/0x140 [ 208.799971][T16453] ? debug_smp_processor_id+0x18/0x20 [ 208.805360][T16453] __x64_sys_sendmsg+0x42/0x50 [ 208.810096][T16453] do_syscall_64+0x39/0x80 [ 208.814488][T16453] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 208.820868][T16453] RIP: 0033:0x45d5b9 [ 208.824746][T16453] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 208.845565][T16453] RSP: 002b:00007fb20bc41c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e 07:01:15 executing program 2 (fault-call:7 fault-nth:2): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="680000002800310f00"/20, @ANYRES32=r3, @ANYBLOB="00000000045eb6"], 0x68}}, 0x0) 07:01:15 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="000000b40c64b877b1d7335ab0e97644a5d3cf23f34e8eea1d2e6b0c3ecb54ec5e53cf5156c52a5ca7394e543b5fa5c2a201926c022f3f68a5003c86894cc2a67bc3f9b2afedf4e232a8c94e6f9312c40486dbf2c3f7862e41eadf78ae1b13b93617aa985176acde4ac0c6c1d845080553775e2dfc107c351a466ce691945bcdbe65f8a9fabf004215ff4ccc49247ce960783415e5cf24f2505467bc5204e8eb090c7464d4c90a7d43264f892a7c4383c3b96b3993ab27df68ed73bc09ea1068d30c1815e2ce8002784df5b5d19e3626db06ab3f6f092aeba17741a99fa09724cd2bd531c61088aab0f279869a", @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="3954acaa536d3f09643d", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r1 = syz_io_uring_setup(0x7dce, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x1, 0x0, 0x0, 0x0, 0x0) [ 208.853958][T16453] RAX: ffffffffffffffda RBX: 000000000002cf40 RCX: 000000000045d5b9 [ 208.861972][T16453] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000005 [ 208.869927][T16453] RBP: 00007fb20bc41ca0 R08: 0000000000000000 R09: 0000000000000000 [ 208.877921][T16453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 208.885864][T16453] R13: 00007ffe3d19b7cf R14: 00007fb20bc429c0 R15: 000000000118cf4c [ 208.942585][T16454] loop5: p2 < > p3 p4 < > [ 208.948159][T16454] loop5: partition table partially beyond EOD, truncated [ 208.977206][T16454] loop5: p3 start 4276224225 is beyond EOD, truncated 07:01:15 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0xf4fe, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) [ 209.018955][T16472] FAULT_INJECTION: forcing a failure. [ 209.018955][T16472] name failslab, interval 1, probability 0, space 0, times 0 [ 209.035154][T16472] CPU: 1 PID: 16472 Comm: syz-executor.2 Not tainted 5.9.0-rc4-syzkaller #0 [ 209.043835][T16472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 209.053872][T16472] Call Trace: [ 209.057161][T16472] dump_stack+0x10f/0x19d [ 209.061485][T16472] should_fail+0x23c/0x250 [ 209.062122][T16476] loop3: p2 < > p3 p4 < > [ 209.065890][T16472] __should_failslab+0x81/0x90 [ 209.065903][T16472] should_failslab+0x5/0x20 [ 209.065934][T16472] slab_pre_alloc_hook+0x20/0xd0 [ 209.065952][T16472] kmem_cache_alloc+0x4f/0x2d0 [ 209.070386][T16476] loop3: partition table partially beyond EOD, truncated [ 209.075183][T16472] ? skb_clone+0x131/0x1f0 [ 209.075195][T16472] ? rhashtable_jhash2+0x13a/0x1a0 [ 209.075206][T16472] skb_clone+0x131/0x1f0 [ 209.075220][T16472] netlink_deliver_tap+0x2a0/0x470 [ 209.075238][T16472] netlink_unicast+0x5ca/0x6b0 [ 209.092815][T16476] loop3: p2 start 25 is beyond EOD, truncated [ 209.096381][T16472] netlink_sendmsg+0x6d8/0x7a0 [ 209.096399][T16472] ? netlink_getsockopt+0x690/0x690 [ 209.105152][T16476] loop3: p3 start 4276224225 is beyond EOD, truncated [ 209.105900][T16472] ____sys_sendmsg+0x360/0x4d0 [ 209.105918][T16472] ? import_iovec+0x171/0x1c0 [ 209.115685][T16476] loop3: p4 size 2 extends beyond EOD, truncated [ 209.119987][T16472] __sys_sendmsg+0x1df/0x260 [ 209.120043][T16472] ? __this_cpu_preempt_check+0x18/0x20 [ 209.120059][T16472] ? vfs_write+0x4d7/0x6f0 [ 209.173163][T16472] ? __fget_light+0x219/0x260 [ 209.177838][T16472] ? check_preemption_disabled+0x51/0x140 [ 209.183551][T16472] ? debug_smp_processor_id+0x18/0x20 [ 209.188921][T16472] __x64_sys_sendmsg+0x42/0x50 [ 209.193765][T16472] do_syscall_64+0x39/0x80 [ 209.198168][T16472] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 209.204053][T16472] RIP: 0033:0x45d5b9 [ 209.207933][T16472] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 209.227574][T16472] RSP: 002b:00007fb20bc41c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 209.235965][T16472] RAX: ffffffffffffffda RBX: 000000000002cf40 RCX: 000000000045d5b9 [ 209.243919][T16472] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000005 [ 209.251874][T16472] RBP: 00007fb20bc41ca0 R08: 0000000000000000 R09: 0000000000000000 [ 209.259826][T16472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 07:01:15 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0xfc, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) [ 209.267780][T16472] R13: 00007ffe3d19b7cf R14: 00007fb20bc429c0 R15: 000000000118cf4c [ 209.297603][T16472] __nla_validate_parse: 44 callbacks suppressed [ 209.297610][T16472] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.2'. [ 209.315418][ T5086] loop5: p2 < > p3 p4 < > [ 209.319937][ T5086] loop5: partition table partially beyond EOD, truncated [ 209.334210][ T5086] loop5: p3 start 4276224225 is beyond EOD, truncated [ 209.382742][T16476] loop3: p2 < > p3 p4 < > [ 209.387160][T16476] loop3: partition table partially beyond EOD, truncated [ 209.394917][T16476] loop3: p2 start 25 is beyond EOD, truncated [ 209.401011][T16476] loop3: p3 start 4276224225 is beyond EOD, truncated [ 209.411585][T16476] loop3: p4 size 2 extends beyond EOD, truncated 07:01:15 executing program 3: syz_read_part_table(0x26, 0x1, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff0a0000010000000000ffffff8500e931190000000000000680ffffff82000000e100e2fe87770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 07:01:15 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0xfc00, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) 07:01:15 executing program 0: sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8\x00\x00\b', @ANYRES16=0x0, @ANYBLOB="04002abd7000fcdbdf2507000000050007000000000008001900000000000c000f00c507000000000000050014007f000000"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = syz_io_uring_setup(0x76d1, &(0x7f0000000040), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000001cc0)='/dev/dsp\x00', 0x800, 0x0) ioctl$BTRFS_IOC_FS_INFO(r4, 0x8400941f, &(0x7f0000005300)) io_uring_enter(r1, 0x1, 0x0, 0x0, 0x0, 0x0) 07:01:15 executing program 2 (fault-call:7 fault-nth:3): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="680000002800310f00"/20, @ANYRES32=r3, @ANYBLOB="00000000045eb6"], 0x68}}, 0x0) [ 209.462515][T16454] loop5: p2 < > p3 p4 < > [ 209.466993][T16454] loop5: partition table partially beyond EOD, truncated [ 209.475243][T16454] loop5: p3 start 4276224225 is beyond EOD, truncated 07:01:16 executing program 5: syz_read_part_table(0x40000900, 0x1, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff0a0000010000000000ffffff8500e931190000000000000680ffffff82000000e100e2fe87770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 07:01:16 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x1c00, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) [ 209.538927][T16527] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 209.560183][T16527] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.2'. [ 209.570013][T16527] FAULT_INJECTION: forcing a failure. [ 209.570013][T16527] name failslab, interval 1, probability 0, space 0, times 0 [ 209.588535][T16527] CPU: 0 PID: 16527 Comm: syz-executor.2 Not tainted 5.9.0-rc4-syzkaller #0 [ 209.597203][T16527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 209.607246][T16527] Call Trace: [ 209.610526][T16527] dump_stack+0x10f/0x19d [ 209.614845][T16527] should_fail+0x23c/0x250 [ 209.619259][T16527] __should_failslab+0x81/0x90 [ 209.624016][T16527] should_failslab+0x5/0x20 [ 209.628524][T16527] slab_pre_alloc_hook+0x20/0xd0 [ 209.633461][T16527] kmem_cache_alloc_node+0x5c/0x280 [ 209.638634][T16527] ? __alloc_skb+0x97/0x2e0 [ 209.643187][T16527] __alloc_skb+0x97/0x2e0 [ 209.647489][T16527] ? __local_bh_enable_ip+0x48/0x70 [ 209.652740][T16527] netlink_ack+0x1f8/0x5d0 [ 209.657164][T16527] netlink_rcv_skb+0x1b8/0x240 [ 209.661983][T16527] ? rtnetlink_bind+0x60/0x60 [ 209.666637][T16527] rtnetlink_rcv+0x18/0x20 [ 209.671028][T16527] netlink_unicast+0x5e2/0x6b0 [ 209.675765][T16527] netlink_sendmsg+0x6d8/0x7a0 [ 209.680502][T16527] ? netlink_getsockopt+0x690/0x690 [ 209.685669][T16527] ____sys_sendmsg+0x360/0x4d0 [ 209.690423][T16527] ? import_iovec+0x171/0x1c0 [ 209.695085][T16527] __sys_sendmsg+0x1df/0x260 [ 209.699649][T16527] ? __this_cpu_preempt_check+0x18/0x20 [ 209.705238][T16527] ? vfs_write+0x4d7/0x6f0 [ 209.709646][T16527] ? __fget_light+0x219/0x260 [ 209.714307][T16527] ? check_preemption_disabled+0x51/0x140 [ 209.720008][T16527] ? debug_smp_processor_id+0x18/0x20 [ 209.725356][T16527] __x64_sys_sendmsg+0x42/0x50 [ 209.730177][T16527] do_syscall_64+0x39/0x80 [ 209.734567][T16527] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 209.740529][T16527] RIP: 0033:0x45d5b9 [ 209.744394][T16527] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 209.763980][T16527] RSP: 002b:00007fb20bc41c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 209.772367][T16527] RAX: ffffffffffffffda RBX: 000000000002cf40 RCX: 000000000045d5b9 [ 209.780312][T16527] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000005 07:01:16 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0xfef4, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) 07:01:16 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0xf4fe, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) 07:01:16 executing program 2 (fault-call:7 fault-nth:4): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="680000002800310f00"/20, @ANYRES32=r3, @ANYBLOB="00000000045eb6"], 0x68}}, 0x0) [ 209.788265][T16527] RBP: 00007fb20bc41ca0 R08: 0000000000000000 R09: 0000000000000000 [ 209.796216][T16527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 209.804160][T16527] R13: 00007ffe3d19b7cf R14: 00007fb20bc429c0 R15: 000000000118cf4c 07:01:16 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x1) setresuid(0x0, r2, 0x0) mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x8470c4, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[], [{@rootcontext={'rootcontext', 0x3d, 'root'}}, {@appraise_type='appraise_type=imasig'}, {@uid_eq={'uid', 0x3d, r2}}]}}) r3 = syz_io_uring_setup(0x76d1, &(0x7f0000000040), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r3, 0x1, 0x0, 0x0, 0x0, 0x0) [ 209.873486][T16553] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 07:01:16 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0xff00, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) [ 209.946372][T16564] loop5: p2 < > p3 p4 < > [ 209.950861][T16564] loop5: partition table partially beyond EOD, truncated [ 209.959213][T16568] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.2'. [ 209.964485][T16564] loop5: p3 start 4276224225 is beyond EOD, truncated 07:01:16 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x118a8, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) [ 209.994722][T16568] FAULT_INJECTION: forcing a failure. [ 209.994722][T16568] name failslab, interval 1, probability 0, space 0, times 0 [ 210.011741][T16568] CPU: 0 PID: 16568 Comm: syz-executor.2 Not tainted 5.9.0-rc4-syzkaller #0 [ 210.020554][T16568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 210.030598][T16568] Call Trace: [ 210.033872][T16568] dump_stack+0x10f/0x19d [ 210.038189][T16568] should_fail+0x23c/0x250 [ 210.042598][T16568] __should_failslab+0x81/0x90 [ 210.047344][T16568] should_failslab+0x5/0x20 [ 210.051838][T16568] slab_pre_alloc_hook+0x20/0xd0 [ 210.056851][T16568] kmem_cache_alloc_node_trace+0x61/0x280 [ 210.062556][T16568] ? __kmalloc_node_track_caller+0x30/0x40 [ 210.068355][T16568] ? kmem_cache_alloc_node+0x16b/0x280 [ 210.073799][T16568] ? netlink_ack+0x1f8/0x5d0 [ 210.078374][T16568] __kmalloc_node_track_caller+0x30/0x40 [ 210.083980][T16568] __alloc_skb+0xd3/0x2e0 [ 210.088294][T16568] netlink_ack+0x1f8/0x5d0 [ 210.093125][T16568] netlink_rcv_skb+0x1b8/0x240 [ 210.097861][T16568] ? rtnetlink_bind+0x60/0x60 [ 210.102523][T16568] rtnetlink_rcv+0x18/0x20 [ 210.106925][T16568] netlink_unicast+0x5e2/0x6b0 [ 210.111734][T16568] netlink_sendmsg+0x6d8/0x7a0 [ 210.116476][T16568] ? netlink_getsockopt+0x690/0x690 [ 210.121719][T16568] ____sys_sendmsg+0x360/0x4d0 [ 210.126471][T16568] ? import_iovec+0x171/0x1c0 [ 210.131121][T16568] __sys_sendmsg+0x1df/0x260 [ 210.135697][T16568] ? __this_cpu_preempt_check+0x18/0x20 [ 210.141254][T16568] ? vfs_write+0x4d7/0x6f0 [ 210.145657][T16568] ? __fget_light+0x219/0x260 [ 210.150309][T16568] ? check_preemption_disabled+0x51/0x140 [ 210.156060][T16568] ? debug_smp_processor_id+0x18/0x20 [ 210.161415][T16568] __x64_sys_sendmsg+0x42/0x50 [ 210.166156][T16568] do_syscall_64+0x39/0x80 [ 210.170625][T16568] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 210.176485][T16568] RIP: 0033:0x45d5b9 [ 210.180352][T16568] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 210.199941][T16568] RSP: 002b:00007fb20bc20c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 210.208329][T16568] RAX: ffffffffffffffda RBX: 000000000002cf40 RCX: 000000000045d5b9 [ 210.216270][T16568] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000005 [ 210.224211][T16568] RBP: 00007fb20bc20ca0 R08: 0000000000000000 R09: 0000000000000000 [ 210.233916][T16568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 210.241871][T16568] R13: 00007ffe3d19b7cf R14: 00007fb20bc219c0 R15: 000000000118cfec [ 210.298912][T16570] loop3: p2 < > p3 p4 < > [ 210.303515][T16570] loop3: partition table partially beyond EOD, truncated [ 210.314046][T16570] loop3: p2 start 25 is beyond EOD, truncated [ 210.320405][T16570] loop3: p3 start 4276224225 is beyond EOD, truncated [ 210.327693][T16570] loop3: p4 size 2 extends beyond EOD, truncated [ 210.363537][T16564] loop5: p2 < > p3 p4 < > [ 210.367962][T16564] loop5: partition table partially beyond EOD, truncated [ 210.378764][T16564] loop5: p3 start 4276224225 is beyond EOD, truncated [ 210.473942][T16570] loop3: p2 < > p3 p4 < > [ 210.476967][ T5086] loop5: p2 < > p3 p4 < > [ 210.478363][T16570] loop3: partition table partially beyond EOD, truncated [ 210.478487][T16570] loop3: p2 start 25 is beyond EOD, truncated [ 210.483814][ T5086] loop5: partition table partially beyond EOD, truncated [ 210.490716][T16570] loop3: p3 start 4276224225 is beyond EOD, truncated [ 210.496956][ T5086] loop5: p3 start 4276224225 is beyond EOD, truncated [ 210.505979][T16570] loop3: p4 size 2 extends beyond EOD, truncated 07:01:17 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB="05726f6f746d6f64653d30303030303030303030303030303030303032303030302c757365725f69643d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c002f8a232532fd721a4552a875fc6f95e30c55a49d8c35fbf510caceffb0d9f86ed9efdb3b7462e873f5355ea54697792cf96b7ae6750c9dc755a9794b576f07f02833b485dde613c3bf31c7dbdb82b86418620400e8d098b86aea31d8d7931edf7aa83c020207f6fb9852c85de61bb26f2ecb74dfcace7a42da1a6ddfb7547c04796826fcceceb2acce52614a219198f18e2fa9244666215ad89ddfb13e7f087a2c9cacf3cd45e51316fce3dd8c744f91280b8d9f3b4a4fc6"]) syz_genetlink_get_family_id$mptcp(&(0x7f0000000340)='mptcp_pm\x00') bind$l2tp(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @rand_addr=0x64010101, 0x4}, 0x10) r1 = syz_io_uring_setup(0x76d1, &(0x7f0000000040), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r4 = openat2(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x101800, 0xca, 0x8}, 0x18) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x40010, r4, 0x10000000) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x1, 0x0, 0x0, 0x0, 0x0) 07:01:17 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0xfc00, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) 07:01:17 executing program 3: syz_read_part_table(0x48, 0x1, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff0a0000010000000000ffffff8500e931190000000000000680ffffff82000000e100e2fe87770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 07:01:17 executing program 5: syz_read_part_table(0x40000a00, 0x1, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff0a0000010000000000ffffff8500e931190000000000000680ffffff82000000e100e2fe87770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 07:01:17 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x40000, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) 07:01:17 executing program 2 (fault-call:7 fault-nth:5): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="680000002800310f00"/20, @ANYRES32=r3, @ANYBLOB="00000000045eb6"], 0x68}}, 0x0) [ 210.651650][T16624] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 210.667734][T16626] fuse: Bad value for 'fd' [ 210.680265][T16624] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.2'. [ 210.689743][T16624] FAULT_INJECTION: forcing a failure. 07:01:17 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0xfef4, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) 07:01:17 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = syz_io_uring_setup(0x76d1, &(0x7f0000000040), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x1, 0x0, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0x6) getsockopt$SO_COOKIE(r4, 0x1, 0x39, &(0x7f0000000140), &(0x7f0000000180)=0x8) [ 210.689743][T16624] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 210.700928][T16639] fuse: Bad value for 'fd' [ 210.702925][T16624] CPU: 0 PID: 16624 Comm: syz-executor.2 Not tainted 5.9.0-rc4-syzkaller #0 [ 210.702932][T16624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 210.702943][T16624] Call Trace: [ 210.729295][T16624] dump_stack+0x10f/0x19d [ 210.733613][T16624] should_fail+0x23c/0x250 [ 210.738019][T16624] __alloc_pages_nodemask+0xd8/0x380 [ 210.743295][T16624] kmem_getpages+0x17/0xb0 [ 210.747693][T16624] cache_grow_begin+0x60/0x1f0 [ 210.752428][T16624] cache_alloc_refill+0x326/0x3e0 [ 210.757448][T16624] ? check_preemption_disabled+0x51/0x140 [ 210.763149][T16624] kmem_cache_alloc_node_trace+0x1ce/0x280 [ 210.768923][T16624] ? __kmalloc_node_track_caller+0x30/0x40 [ 210.774779][T16624] ? netlink_ack+0x1f8/0x5d0 [ 210.779336][T16624] __kmalloc_node_track_caller+0x30/0x40 [ 210.784936][T16624] __alloc_skb+0xd3/0x2e0 [ 210.789245][T16624] netlink_ack+0x1f8/0x5d0 [ 210.793644][T16624] netlink_rcv_skb+0x1b8/0x240 [ 210.798387][T16624] ? rtnetlink_bind+0x60/0x60 [ 210.803033][T16624] rtnetlink_rcv+0x18/0x20 [ 210.807489][T16624] netlink_unicast+0x5e2/0x6b0 [ 210.812234][T16624] netlink_sendmsg+0x6d8/0x7a0 [ 210.816968][T16624] ? netlink_getsockopt+0x690/0x690 [ 210.822148][T16624] ____sys_sendmsg+0x360/0x4d0 [ 210.826881][T16624] ? import_iovec+0x171/0x1c0 [ 210.831525][T16624] __sys_sendmsg+0x1df/0x260 [ 210.836090][T16624] ? __this_cpu_preempt_check+0x18/0x20 [ 210.841613][T16624] ? vfs_write+0x4d7/0x6f0 [ 210.846015][T16624] ? __fget_light+0x219/0x260 [ 210.850717][T16624] ? check_preemption_disabled+0x51/0x140 [ 210.856416][T16624] ? debug_smp_processor_id+0x18/0x20 [ 210.861755][T16624] __x64_sys_sendmsg+0x42/0x50 [ 210.866529][T16624] do_syscall_64+0x39/0x80 [ 210.870926][T16624] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 210.876785][T16624] RIP: 0033:0x45d5b9 [ 210.880649][T16624] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 07:01:17 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x3665c4, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) 07:01:17 executing program 2 (fault-call:7 fault-nth:6): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="680000002800310f00"/20, @ANYRES32=r3, @ANYBLOB="00000000045eb6"], 0x68}}, 0x0) [ 210.900220][T16624] RSP: 002b:00007fb20bc41c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 210.908599][T16624] RAX: ffffffffffffffda RBX: 000000000002cf40 RCX: 000000000045d5b9 [ 210.916565][T16624] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000005 [ 210.924521][T16624] RBP: 00007fb20bc41ca0 R08: 0000000000000000 R09: 0000000000000000 [ 210.932463][T16624] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 210.940416][T16624] R13: 00007ffe3d19b7cf R14: 00007fb20bc429c0 R15: 000000000118cf4c [ 210.988353][T16621] loop5: p2 < > p3 p4 < > [ 210.997903][T16621] loop5: partition table partially beyond EOD, truncated [ 211.011455][T16621] loop5: p3 start 4276224225 is beyond EOD, truncated [ 211.034058][T16652] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 07:01:17 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x1000000, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) 07:01:17 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0xff00, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) [ 211.079700][T16652] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.2'. [ 211.094584][T16645] loop3: p2 < > p3 p4 < > [ 211.099012][T16645] loop3: partition table partially beyond EOD, truncated 07:01:17 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="680000002800310f00"/20, @ANYRES32=r3, @ANYBLOB="00000000045eb6"], 0x68}}, 0x0) [ 211.128476][T16645] loop3: p2 start 25 is beyond EOD, truncated 07:01:17 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x20) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="913960aa84cc4a2e36048404aac1bbdd3c05daebde5b2f3c8dd2ba3983cff09e2908f7f0a15f98b6e96a396d2ae0f3c9db94b1976f86e3d0edfd5587ca76146b72b0ab187e5fc296ed92a97f85daa597540f6bf6a904cc6427babd7f8f9b577525d99544ab96a51f49e2e9bcfb9fbf20a495cf28862998401ae8a5ba59668a4d037c5a002ee8b14d809e3c5a0d5a1901436e", @ANYRESHEX=r0, @ANYBLOB="2c726f6f741fb33f7b8511310130303030303030303030303030303032303030302c757365725f69643d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r1 = syz_io_uring_setup(0x76d1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x339}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x6, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r1, 0x80, 0x3aee, 0x0, &(0x7f0000000000)={[0x7]}, 0x8) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380)='ethtool\x00') r6 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x400, 0x0) signalfd4(r6, &(0x7f0000000400)={[0x1]}, 0x8, 0x80000) sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x18, r5, 0x1, 0x0, 0x0, {0x12}, [@ETHTOOL_A_DEBUG_HEADER={0x4, 0x1, 0x0, 0x0}]}, 0x18}}, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, r5, 0x400, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sync_file_range(0xffffffffffffffff, 0x6, 0x2, 0x7) io_uring_enter(r1, 0x1, 0x0, 0x0, 0x0, 0x0) [ 211.152442][T16621] loop5: p2 < > p3 p4 < > [ 211.158020][T16621] loop5: partition table partially beyond EOD, truncated [ 211.158405][T16645] loop3: p3 start 4276224225 is beyond EOD, truncated [ 211.170965][T16621] loop5: p3 start 4276224225 is beyond EOD, truncated 07:01:17 executing program 5: syz_read_part_table(0x40000b00, 0x1, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff0a0000010000000000ffffff8500e931190000000000000680ffffff82000000e100e2fe87770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) [ 211.201627][T16691] fuse: Unknown parameter '‘9`ª„ÌJ.6„ªÁ»Ý<ÚëÞ[/<Òº9ƒÏðž)÷ð¡_˜¶éj9m*àóÉÛ”±—o†ãÐíýU‡Êvkr°«~_–풩…Ú¥—Tkö©Ìd'º½›Wu%Ù•D«–¥Iâé¼ûŸ¿ ¤•Ï(†)˜@襺YfŠM|Z' [ 211.220180][T16645] loop3: p4 size 2 extends beyond EOD, truncated [ 211.230147][T16692] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 211.283618][T16694] fuse: Unknown parameter '‘9`ª„ÌJ.6„ªÁ»Ý<ÚëÞ[/<Òº9ƒÏðž)÷ð¡_˜¶éj9m*àóÉÛ”±—o†ãÐíýU‡Êvkr°«~_–풩…Ú¥—Tkö©Ìd'º½›Wu%Ù•D«–¥Iâé¼ûŸ¿ ¤•Ï(†)˜@襺YfŠM|Z' [ 211.386899][T16708] loop5: p2 < > p3 p4 < > [ 211.391384][T16708] loop5: partition table partially beyond EOD, truncated [ 211.399817][T16708] loop5: p3 start 4276224225 is beyond EOD, truncated [ 211.429725][T16645] loop3: p2 < > p3 p4 < > [ 211.434224][T16645] loop3: partition table partially beyond EOD, truncated [ 211.441421][T16645] loop3: p2 start 25 is beyond EOD, truncated [ 211.448703][T16645] loop3: p3 start 4276224225 is beyond EOD, truncated [ 211.456095][T16645] loop3: p4 size 2 extends beyond EOD, truncated [ 211.490070][T10897] print_req_error: 28 callbacks suppressed [ 211.490086][T10897] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 211.504965][T16708] __loop_clr_fd: partition scan of loop5 failed (rc=-16) [ 211.522536][T10896] blk_update_request: I/O error, dev loop5, sector 25 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 211.534073][ T3256] blk_update_request: I/O error, dev loop5, sector 25 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 211.545040][ T3256] buffer_io_error: 26 callbacks suppressed [ 211.545055][ T3256] Buffer I/O error on dev loop5p2, logical block 0, async page read [ 211.558946][ T3256] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 211.569837][ T3256] Buffer I/O error on dev loop5p4, logical block 0, async page read [ 211.577850][ T3256] blk_update_request: I/O error, dev loop5, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 211.588869][ T3256] Buffer I/O error on dev loop5p4, logical block 1, async page read [ 211.596938][ T3256] blk_update_request: I/O error, dev loop5, sector 26 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 211.607920][ T3256] Buffer I/O error on dev loop5p2, logical block 1, async page read [ 211.616378][ T3256] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 211.627341][ T3256] Buffer I/O error on dev loop5p4, logical block 0, async page read [ 211.635490][ T3256] blk_update_request: I/O error, dev loop5, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 211.646417][ T3256] Buffer I/O error on dev loop5p4, logical block 1, async page read [ 211.654458][ T3256] blk_update_request: I/O error, dev loop5, sector 25 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 211.665448][ T3256] Buffer I/O error on dev loop5p2, logical block 0, async page read [ 211.673455][ T3256] blk_update_request: I/O error, dev loop5, sector 26 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 211.684403][ T3256] Buffer I/O error on dev loop5p2, logical block 1, async page read [ 211.692472][ T3256] Buffer I/O error on dev loop5p4, logical block 0, async page read [ 211.700452][ T3256] Buffer I/O error on dev loop5p4, logical block 1, async page read 07:01:18 executing program 3: syz_read_part_table(0x4c, 0x1, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff0a0000010000000000ffffff8500e931190000000000000680ffffff82000000e100e2fe87770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 07:01:18 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x118a8, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) 07:01:18 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x4000000, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) 07:01:18 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="680000002800310f00"/20, @ANYRES32=r3, @ANYBLOB="00000000045eb6"], 0x68}}, 0x0) 07:01:18 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYRES32=0x0]) r1 = syz_io_uring_setup(0x76d1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x1000}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x1, 0x0, 0x0, 0x0, 0x0) 07:01:18 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x40000, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) 07:01:18 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x10000000, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) 07:01:18 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0a643daf33375939aea20b93af58142f219296addfb08ac374fd592a392a477af96e8d9416061288c430a354c5a41f8463bf3af9fd8780e62a93e962e6152c76d86727ab72e8468c3c699880d8d5e55a4497516c0af835558fc4f8814993366f0f0191724924f7f9aa0ab2c1bab54a8e9c3b5918792c10cbbb1954e82eac7e8aee219d0931b740b32746d355a91bb41faa1ad1cc98c0267d4fd1390a869aa3f80049bb110256319ededf9018f6085e48f3a13ed9f787cdb9e48903cbfac012b0a62852501d7513f4e7575fcab6e50c5f1b5c6b4e3029e6ed50e6c233d767d52747fc83db92a14289168ecd", @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r1 = syz_io_uring_setup(0x76d1, &(0x7f0000000040), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x1, 0x0, 0x0, 0x0, 0x0) [ 211.823451][T16708] loop5: p2 < > p3 p4 < > [ 211.827922][T16708] loop5: partition table partially beyond EOD, truncated [ 211.841841][T16708] loop5: p3 start 4276224225 is beyond EOD, truncated 07:01:18 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x2, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="680000002800310f00"/20, @ANYRES32=r3, @ANYBLOB="00000000045eb6"], 0x68}}, 0x0) 07:01:18 executing program 5: syz_read_part_table(0x40000c00, 0x1, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff0a0000010000000000ffffff8500e931190000000000000680ffffff82000000e100e2fe87770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 07:01:18 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x1c000000, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) 07:01:18 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x3665c4, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) [ 211.948849][T16766] fuse: Unknown parameter ' [ 211.948849][T16766] d' [ 211.971012][T16757] loop3: p2 < > p3 p4 < > [ 211.997353][T16757] loop3: partition table partially beyond EOD, truncated [ 212.026206][T16757] loop3: p2 start 25 is beyond EOD, truncated [ 212.040909][T16775] fuse: Unknown parameter ' [ 212.040909][T16775] d' [ 212.047306][T16757] loop3: p3 start 4276224225 is beyond EOD, truncated [ 212.067346][T16757] loop3: p4 size 2 extends beyond EOD, truncated [ 212.112251][T16784] loop5: p2 < > p3 p4 < > [ 212.116815][T16784] loop5: partition table partially beyond EOD, truncated [ 212.128083][T16784] loop5: p3 start 4276224225 is beyond EOD, truncated 07:01:18 executing program 3: syz_read_part_table(0x5c, 0x1, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff0a0000010000000000ffffff8500e931190000000000000680ffffff82000000e100e2fe87770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 07:01:18 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x4, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="680000002800310f00"/20, @ANYRES32=r3, @ANYBLOB="00000000045eb6"], 0x68}}, 0x0) 07:01:18 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x1000000, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) 07:01:18 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB, @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r1 = syz_io_uring_setup(0x76d1, &(0x7f0000000040), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bsg\x00', 0x40000, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {}, {0x14, 0x18, {0x5, @bearer=@udp='udp:syz2\x00'}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x200000c4) io_uring_enter(r1, 0x1, 0x0, 0x0, 0x0, 0x0) 07:01:18 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0xa8180100, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) 07:01:18 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x4000000, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) 07:01:18 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x5, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="680000002800310f00"/20, @ANYRES32=r3, @ANYBLOB="00000000045eb6"], 0x68}}, 0x0) 07:01:18 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0xc4653600, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) [ 212.269311][T16784] loop5: p2 < > p3 p4 < > [ 212.275207][T16784] loop5: partition table partially beyond EOD, truncated [ 212.299003][T16784] loop5: p3 start 4276224225 is beyond EOD, truncated [ 212.306893][T16818] fuse: Unknown parameter '0x0000000000000003' 07:01:18 executing program 0: r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$CHAR_RAW_PG(r0, 0x401870c8, 0x0) mkdirat(r0, &(0x7f0000002040)='./file0\x00', 0x120) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000040), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$CHAR_RAW_PG(r5, 0x401870c8, 0x0) r6 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x101, 0x301400) ioctl$SOUND_MIXER_READ_RECMASK(r6, 0x80044dfd, &(0x7f00000001c0)) ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x4020565a, &(0x7f0000000140)={0x5, 0x10000, 0x1}) io_uring_enter(r2, 0x1, 0x0, 0x0, 0x0, 0x0) [ 212.330538][T16826] fuse: Unknown parameter '0x0000000000000003' [ 212.423606][ T5086] loop5: p2 < > p3 p4 < > [ 212.428023][ T5086] loop5: partition table partially beyond EOD, truncated [ 212.442098][ T5086] loop5: p3 start 4276224225 is beyond EOD, truncated 07:01:18 executing program 5: syz_read_part_table(0x40000d00, 0x1, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff0a0000010000000000ffffff8500e931190000000000000680ffffff82000000e100e2fe87770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 07:01:18 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x10000000, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) 07:01:18 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0xe0ffffff, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) [ 212.582749][T16846] loop3: p2 < > p3 p4 < > [ 212.593883][T16846] loop3: partition table partially beyond EOD, truncated [ 212.634519][T16846] loop3: p2 start 25 is beyond EOD, truncated [ 212.641307][T16846] loop3: p3 start 4276224225 is beyond EOD, truncated [ 212.651377][T16846] loop3: p4 size 2 extends beyond EOD, truncated [ 212.710355][T16871] loop5: p2 < > p3 p4 < > [ 212.716643][T16871] loop5: partition table partially beyond EOD, truncated [ 212.724606][T16871] loop5: p3 start 4276224225 is beyond EOD, truncated [ 212.865801][T16846] loop3: p2 < > p3 p4 < > [ 212.870273][T16846] loop3: partition table partially beyond EOD, truncated [ 212.887169][T16846] loop3: p2 start 25 is beyond EOD, truncated [ 212.893633][T16846] loop3: p3 start 4276224225 is beyond EOD, truncated [ 212.900425][T16846] loop3: p4 size 2 extends beyond EOD, truncated 07:01:19 executing program 3: syz_read_part_table(0x60, 0x1, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff0a0000010000000000ffffff8500e931190000000000000680ffffff82000000e100e2fe87770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 07:01:19 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="71af4d45e0da2b842c00"]) r1 = syz_io_uring_setup(0x76d1, &(0x7f0000000040), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000041c0)='/dev/fuse\x00', 0x2, 0x0) r6 = syz_mount_image$fuse(&(0x7f0000000040)='fuse\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x100010, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r7, r2, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd=r6}, 0x0) io_uring_enter(r1, 0x1, 0x0, 0x0, 0x0, 0x0) 07:01:19 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0xf4fe0000, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) 07:01:19 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x6, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="680000002800310f00"/20, @ANYRES32=r3, @ANYBLOB="00000000045eb6"], 0x68}}, 0x0) 07:01:19 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x1c000000, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) 07:01:19 executing program 5: syz_read_part_table(0x40000e00, 0x1, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff0a0000010000000000ffffff8500e931190000000000000680ffffff82000000e100e2fe87770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) [ 212.980124][T16894] fuse: Bad value for 'group_id' 07:01:19 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0xfc000000, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) 07:01:19 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0xa8180100, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) 07:01:19 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="680000002800310f00"/20, @ANYRES32=r3, @ANYBLOB="00000000045eb6"], 0x68}}, 0x0) 07:01:19 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0xfe80ffff, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) 07:01:19 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0xc4653600, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) 07:01:19 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x9, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="680000002800310f00"/20, @ANYRES32=r3, @ANYBLOB="00000000045eb6"], 0x68}}, 0x0) [ 213.127584][T16900] loop5: p2 < > p3 p4 < > [ 213.132166][T16900] loop5: partition table partially beyond EOD, truncated [ 213.162534][T16919] loop3: p2 < > p3 p4 < > [ 213.167072][T16919] loop3: partition table partially beyond EOD, truncated [ 213.183398][T16900] loop5: p3 start 4276224225 is beyond EOD, truncated [ 213.192063][T16919] loop3: p2 start 25 is beyond EOD, truncated [ 213.206951][T16919] loop3: p3 start 4276224225 is beyond EOD, truncated [ 213.214184][T16919] loop3: p4 size 2 extends beyond EOD, truncated [ 213.313763][T16919] loop3: p2 < > p3 p4 < > [ 213.318430][T16919] loop3: partition table partially beyond EOD, truncated [ 213.325664][T16919] loop3: p2 start 25 is beyond EOD, truncated [ 213.332118][T16919] loop3: p3 start 4276224225 is beyond EOD, truncated [ 213.338925][T16919] loop3: p4 size 2 extends beyond EOD, truncated 07:01:19 executing program 3: syz_read_part_table(0x68, 0x1, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff0a0000010000000000ffffff8500e931190000000000000680ffffff82000000e100e2fe87770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) [ 213.532118][T16964] loop3: p2 < > p3 p4 < > [ 213.539392][T16964] loop3: partition table partially beyond EOD, truncated [ 213.547624][T16964] loop3: p2 start 25 is beyond EOD, truncated [ 213.554352][T16964] loop3: p3 start 4276224225 is beyond EOD, truncated [ 213.561169][T16964] loop3: p4 size 2 extends beyond EOD, truncated [ 213.662061][T16964] loop3: p2 < > p3 p4 < > [ 213.666567][T16964] loop3: partition table partially beyond EOD, truncated [ 213.674604][T16964] loop3: p2 start 25 is beyond EOD, truncated [ 213.680961][T16964] loop3: p3 start 4276224225 is beyond EOD, truncated [ 213.688478][T16964] loop3: p4 size 2 extends beyond EOD, truncated [ 213.777518][T16916] fuse: Bad value for 'group_id' 07:01:20 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0xe0ffffff, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) 07:01:20 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0xfec0ffff, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) 07:01:20 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bsg\x00', 0x10000, 0x0) getsockopt$inet6_int(r1, 0x29, 0x24, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r2 = syz_io_uring_setup(0x7cb4, &(0x7f0000000040), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r5, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x10001, 0x1}}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x7}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x3}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x20, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x1}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x14, 0x1, "dde711c83b28425b52de294719b2cd17"}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x8005) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) setsockopt$netlink_NETLINK_RX_RING(r1, 0x10e, 0x6, &(0x7f0000000200)={0x0, 0x6, 0x4, 0x9}, 0x10) io_uring_enter(r2, 0x1, 0x0, 0x0, 0x0, 0x0) 07:01:20 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0xa, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="680000002800310f00"/20, @ANYRES32=r3, @ANYBLOB="00000000045eb6"], 0x68}}, 0x0) 07:01:20 executing program 5: syz_read_part_table(0x40001100, 0x1, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff0a0000010000000000ffffff8500e931190000000000000680ffffff82000000e100e2fe87770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 07:01:20 executing program 3: syz_read_part_table(0x6c, 0x1, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff0a0000010000000000ffffff8500e931190000000000000680ffffff82000000e100e2fe87770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 07:01:20 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0xff000000, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) 07:01:20 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c63883f1a660ddf5f", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r1 = syz_io_uring_setup(0x76d1, &(0x7f0000000040), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x1, 0x0, 0x0, 0x0, 0x0) 07:01:20 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="680000002800310f00"/20, @ANYRES32=r3, @ANYBLOB="00000000045eb6"], 0x68}}, 0x0) 07:01:20 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0xf4fe0000, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) [ 213.902287][T16994] loop3: p2 < > p3 p4 < > [ 213.906786][T16994] loop3: partition table partially beyond EOD, truncated [ 213.914341][T16994] loop3: p2 start 25 is beyond EOD, truncated [ 213.920494][T16994] loop3: p3 start 4276224225 is beyond EOD, truncated [ 213.927582][T16994] loop3: p4 size 2 extends beyond EOD, truncated 07:01:20 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0xffff0000, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) [ 213.972712][T17018] loop5: p2 < > p3 p4 < > [ 213.977508][T17018] loop5: partition table partially beyond EOD, truncated [ 213.989625][T17018] loop5: p3 start 4276224225 is beyond EOD, truncated 07:01:20 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0xf, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="680000002800310f00"/20, @ANYRES32=r3, @ANYBLOB="00000000045eb6"], 0x68}}, 0x0) 07:01:20 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0xfc000000, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) 07:01:20 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0xffff80fe, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) [ 214.085039][T16994] loop3: p2 < > p3 p4 < > [ 214.089610][T16994] loop3: partition table partially beyond EOD, truncated [ 214.093978][T17045] fuse: Unknown parameter 'cˆ?f ß_00000000000000000000' [ 214.097851][T16994] loop3: p2 start 25 is beyond EOD, truncated [ 214.111581][T16994] loop3: p3 start 4276224225 is beyond EOD, truncated [ 214.118721][T16994] loop3: p4 size 2 extends beyond EOD, truncated 07:01:20 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0xffffffffffffffff, 0x4, &(0x7f0000000400)=""/114) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB="64653d303030303030303030303030303030303030323030303081000000725f69643d", @ANYRESDEC=0x0, @ANYBLOB="2c67726f75705f69643defffcfc5555e84c55de1f3c750ea81dee5f7967a41353a97b33c605aabc8187a6bc58c0e8f4f791f9803fb9ac10937a24d495ec9fe0bdbf493901b4680e511bbc755d3e55952564404168214040781bdd7642d7e10002d01edb8da9286d76afb1dd907736ee4c4f4b0cbad161c4e17b53ddb668da7b848b65a6a", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000180)={&(0x7f0000000480)="f100af849d24f69b374f1f8dc96d71f685bdf5205e533b89eca0fac77ed1fc068350f02b1fcdb79b0f5a1ac2fa7ce36dcd130d20b8d802bcd46a451b66560e8d176669", 0x43}) syz_io_uring_setup(0x76d1, &(0x7f0000000040), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xffffffffffffff76, &(0x7f00000001c0)={&(0x7f00000002c0)={0x1c, 0x6, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x0, 0x2, 'syz2\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200008d4}, 0x40824) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0x5, 0x101600) io_uring_enter(r3, 0x5, 0x6243, 0x1, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)) 07:01:20 executing program 3: syz_read_part_table(0x74, 0x1, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff0a0000010000000000ffffff8500e931190000000000000680ffffff82000000e100e2fe87770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) [ 214.145192][T17054] fuse: Unknown parameter 'cˆ?f ß_00000000000000000000' [ 214.234780][T17018] loop5: p2 < > p3 p4 < > [ 214.240350][T17018] loop5: partition table partially beyond EOD, truncated [ 214.249982][T17075] fuse: Bad value for 'fd' [ 214.265635][T17018] loop5: p3 start 4276224225 is beyond EOD, truncated 07:01:20 executing program 5: syz_read_part_table(0x40001200, 0x1, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff0a0000010000000000ffffff8500e931190000000000000680ffffff82000000e100e2fe87770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 07:01:20 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0xfe80ffff, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) 07:01:20 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="680000002800310f00"/20, @ANYRES32=r3, @ANYBLOB="00000000045eb6"], 0x68}}, 0x0) 07:01:20 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0xffffc0fe, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) [ 214.357404][T17095] __nla_validate_parse: 21 callbacks suppressed [ 214.357412][T17095] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 214.357789][T17075] fuse: Bad value for 'fd' [ 214.371997][T17095] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.2'. [ 214.386933][T17087] loop3: p2 < > p3 p4 < > [ 214.391445][T17087] loop3: partition table partially beyond EOD, truncated [ 214.399279][T17087] loop3: p2 start 25 is beyond EOD, truncated 07:01:20 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0xffffff7f, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) 07:01:20 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0xfec0ffff, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) 07:01:20 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x44, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="680000002800310f00"/20, @ANYRES32=r3, @ANYBLOB="00000000045eb6"], 0x68}}, 0x0) [ 214.405712][T17087] loop3: p3 start 4276224225 is beyond EOD, truncated [ 214.405722][T17087] loop3: p4 size 2 extends beyond EOD, truncated 07:01:20 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(&(0x7f0000000140)=ANY=[@ANYBLOB], &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='cramfs\x00', 0x2200005, &(0x7f0000000200)='/dev/fuse\x00') r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="46bf"]) r1 = syz_io_uring_setup(0x76d1, &(0x7f0000000040), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x10003}, 0x0) faccessat2(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x2, 0x0) io_uring_enter(r1, 0x1, 0x0, 0x0, 0x0, 0x0) 07:01:21 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0xffffffe0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) [ 214.548778][T17126] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 07:01:21 executing program 5: syz_read_part_table(0x40001813, 0x1, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff0a0000010000000000ffffff8500e931190000000000000680ffffff82000000e100e2fe87770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 07:01:21 executing program 3: syz_read_part_table(0x7a, 0x1, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff0a0000010000000000ffffff8500e931190000000000000680ffffff82000000e100e2fe87770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 07:01:21 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0xff000000, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) [ 214.595424][T17126] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.2'. [ 214.621110][T17132] fuse: Bad value for 'group_id' [ 214.653302][T17144] fuse: Bad value for 'group_id' 07:01:21 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0xffffffff, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) 07:01:21 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x60, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="680000002800310f00"/20, @ANYRES32=r3, @ANYBLOB="00000000045eb6"], 0x68}}, 0x0) 07:01:21 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="00000000000400000000", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r1 = syz_io_uring_setup(0x76d1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x1, 0x0, 0x0, 0x0, 0x0) [ 214.674710][T17137] loop5: p2 < > p3 p4 < > [ 214.683566][T17137] loop5: partition table partially beyond EOD, truncated [ 214.705267][T17137] loop5: p3 start 4276224225 is beyond EOD, truncated 07:01:21 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x1fb, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="680000002800310f00"/20, @ANYRES32=r3, @ANYBLOB="00000000045eb6"], 0x68}}, 0x0) 07:01:21 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0, 0x4}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) 07:01:21 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0xffff0000, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) [ 214.749653][T17164] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 214.770490][T17164] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.2'. [ 214.787655][T17154] loop3: p2 < > p3 p4 < > [ 214.792218][T17154] loop3: partition table partially beyond EOD, truncated [ 214.830982][T17154] loop3: p2 start 25 is beyond EOD, truncated [ 214.841825][T17189] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 214.853109][T17154] loop3: p3 start 4276224225 is beyond EOD, truncated [ 214.858652][T17189] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.2'. 07:01:21 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0, 0x10}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) 07:01:21 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x500, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="680000002800310f00"/20, @ANYRES32=r3, @ANYBLOB="00000000045eb6"], 0x68}}, 0x0) 07:01:21 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = syz_io_uring_setup(0x76d1, &(0x7f0000000040), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x1, 0x0, 0x0, 0x0, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$CHAR_RAW_PG(r4, 0x401870c8, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r4, 0xc040564b, &(0x7f00000001c0)={0x1, 0x0, 0x100f, 0xfff, 0x5, {0x1, 0xfffffff8}, 0x1}) r5 = signalfd4(r0, &(0x7f0000000140)={[0x401]}, 0x8, 0x80800) io_uring_enter(r5, 0x5cb0, 0xf442, 0x0, &(0x7f0000000180)={[0x3f]}, 0x8) [ 214.877208][T17137] loop5: p2 < > p3 p4 < > [ 214.883248][T17137] loop5: partition table partially beyond EOD, truncated [ 214.896377][T17154] loop3: p4 size 2 extends beyond EOD, truncated [ 214.915698][T17137] loop5: p3 start 4276224225 is beyond EOD, truncated [ 214.954194][T17210] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 214.965844][ T5086] loop5: p2 < > p3 p4 < > [ 214.970677][ T5086] loop5: partition table partially beyond EOD, truncated [ 214.972685][T17210] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.2'. [ 214.990107][ T5086] loop5: p3 start 4276224225 is beyond EOD, truncated 07:01:21 executing program 5: syz_read_part_table(0x40002000, 0x1, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff0a0000010000000000ffffff8500e931190000000000000680ffffff82000000e100e2fe87770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) [ 215.019052][T17154] loop3: p2 < > p3 p4 < > [ 215.025345][T17154] loop3: partition table partially beyond EOD, truncated [ 215.032966][T17154] loop3: p2 start 25 is beyond EOD, truncated [ 215.039095][T17154] loop3: p3 start 4276224225 is beyond EOD, truncated [ 215.072641][T17154] loop3: p4 size 2 extends beyond EOD, truncated 07:01:21 executing program 3: syz_read_part_table(0x90, 0x1, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff0a0000010000000000ffffff8500e931190000000000000680ffffff82000000e100e2fe87770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 07:01:21 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0, 0x1c}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) 07:01:21 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0xffff80fe, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) 07:01:21 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x600, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="680000002800310f00"/20, @ANYRES32=r3, @ANYBLOB="00000000045eb6"], 0x68}}, 0x0) 07:01:21 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = syz_io_uring_setup(0x76d1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x35c}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) r4 = socket$isdn_base(0x22, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=@delchain={0x68, 0x28, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0x4, 0xffff}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x38, 0x2, [@TCA_BASIC_ACT={0x34, 0x3, [@m_mirred={0x30, 0x0, 0x0, 0x0, {{0xb, 0x1, 'mirred\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x68}}, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r7, 0x84, 0xb, &(0x7f0000000000)={0xb4, 0x5, 0x6e, 0x2, 0x8, 0x7f, 0xff, 0x80, 0x3, 0x9, 0x3, 0x0, 0x1, 0x2}, 0xe) io_uring_enter(r1, 0x1, 0x0, 0x0, 0x0, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r4, 0x0, 0x484, &(0x7f0000000380)=""/190, &(0x7f00000002c0)=0xbe) [ 215.152451][ T5086] loop3: p2 < > p3 p4 < > [ 215.156899][ T5086] loop3: partition table partially beyond EOD, truncated [ 215.183372][ T5086] loop3: p2 start 25 is beyond EOD, truncated [ 215.190336][ T5086] loop3: p3 start 4276224225 is beyond EOD, truncated 07:01:21 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0, 0xfc}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) [ 215.197626][ T5086] loop3: p4 size 2 extends beyond EOD, truncated [ 215.214961][T17244] loop5: p2 < > p3 p4 < > [ 215.219813][T17244] loop5: partition table partially beyond EOD, truncated 07:01:21 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0xffffc0fe, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) 07:01:21 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x900, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="680000002800310f00"/20, @ANYRES32=r3, @ANYBLOB="00000000045eb6"], 0x68}}, 0x0) [ 215.264480][T17244] loop5: p3 start 4276224225 is beyond EOD, truncated 07:01:21 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = syz_io_uring_setup(0x76d1, &(0x7f0000000040), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000140)={'syz1\x00', {0x1, 0x0, 0x8001, 0xaa}, 0x35, [0x1, 0x1be, 0x8001, 0x4, 0x5, 0x946, 0x4000000, 0x4, 0x0, 0x8, 0xfff, 0x10000, 0x0, 0x3ff, 0x7, 0x2c5, 0xed5, 0x3c3a, 0x1, 0x3, 0x80, 0xa5d0, 0x6, 0x8, 0x4, 0x3, 0xe37, 0x2, 0x4, 0x5e55, 0x5, 0x20, 0x7, 0x5, 0x5, 0x40a2cd59, 0x7, 0xfffff801, 0x7, 0x3ff, 0x7, 0x80000001, 0x3, 0x7ff, 0x3e, 0x610, 0x5, 0x4, 0x936e, 0x9, 0x0, 0x3, 0x1, 0x3, 0x5, 0xfe000000, 0x3, 0x140000, 0x0, 0x8, 0x8, 0xc2, 0x3, 0x200], [0x24, 0x4, 0xfffff800, 0x7, 0x4, 0xfffffdf4, 0x77cf, 0x3, 0x4, 0x1, 0x4, 0xffff, 0x101, 0x7f, 0x401, 0xf3a5, 0x9, 0x4d, 0x1, 0x8, 0x9, 0x4, 0x1ff, 0x200, 0x81, 0x4f7b8c79, 0x81, 0x3, 0x1fa0, 0x2e95, 0x8, 0x40, 0x0, 0x7, 0x8000, 0x80000000, 0x10000, 0x5, 0xfff, 0x0, 0x80000000, 0x1, 0x2, 0xffff, 0x6, 0xfff, 0x9, 0x401, 0x6, 0xf781, 0x1, 0xffffff7f, 0x3, 0x7, 0x6, 0x1, 0xce, 0x5, 0x5, 0x3f, 0x20, 0x6, 0x401, 0x28000000], [0x5, 0x1, 0x0, 0x1f, 0x3f, 0x9, 0x8, 0x9, 0x8, 0x7ff, 0x8, 0x4, 0xc, 0x4a4a, 0x6, 0x6, 0x6, 0x100, 0x84e, 0x40, 0x9, 0x7, 0x46, 0x4, 0x0, 0x4, 0x8c72, 0x2c, 0x6, 0xaa9a, 0x7fff, 0x8, 0x9, 0xffff40e7, 0x1000, 0x5, 0xb17, 0x8, 0x8001, 0x3, 0x9, 0x1eb, 0x10001, 0x5, 0x3f, 0x7ff, 0x7, 0x6, 0x3ff, 0xfffffffe, 0x9f2b, 0x101, 0x5, 0xfffffe00, 0x7f, 0x7, 0x8c6, 0x5, 0x8, 0xffff, 0x1000, 0xff, 0x401, 0x6f], [0x101, 0x8001, 0x1, 0x90, 0xd2, 0x1, 0x2, 0x3, 0xfffffffd, 0x5, 0x4, 0x7, 0x4, 0x1, 0x2, 0x3, 0x5, 0x40, 0x8, 0x8, 0x3, 0x8, 0x9, 0x6, 0x5, 0xffffffff, 0xb34, 0x8, 0x6, 0xfffffffa, 0xf0000000, 0x7, 0x2, 0x3, 0x5, 0x7, 0x2, 0x2c, 0x8, 0x10001, 0x4, 0xd6, 0x7, 0x7, 0x81, 0x1c7, 0x101, 0xffff, 0x2, 0x10001, 0x1, 0x80000000, 0x400, 0x81, 0x9, 0x1ff, 0x1, 0x22d, 0x2a9, 0x3, 0xb2, 0x20, 0x7, 0x10001]}, 0x45c) io_uring_enter(r1, 0x1, 0x0, 0x0, 0x0, 0x0) 07:01:21 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0xa00, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="680000002800310f00"/20, @ANYRES32=r3, @ANYBLOB="00000000045eb6"], 0x68}}, 0x0) 07:01:21 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0, 0x1c00}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) [ 215.416003][T17284] loop3: p2 < > p3 p4 < > [ 215.420459][T17284] loop3: partition table partially beyond EOD, truncated [ 215.438910][T17284] loop3: p2 start 25 is beyond EOD, truncated [ 215.449979][T17284] loop3: p3 start 4276224225 is beyond EOD, truncated [ 215.457616][T17284] loop3: p4 size 2 extends beyond EOD, truncated [ 215.467166][T17244] loop5: p2 < > p3 p4 < > [ 215.478172][T17244] loop5: partition table partially beyond EOD, truncated [ 215.486726][T17244] loop5: p3 start 4276224225 is beyond EOD, truncated 07:01:22 executing program 5: syz_read_part_table(0x40002900, 0x1, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff0a0000010000000000ffffff8500e931190000000000000680ffffff82000000e100e2fe87770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) [ 215.692268][T17284] loop3: p2 < > p3 p4 < > [ 215.696690][T17284] loop3: partition table partially beyond EOD, truncated [ 215.704769][T17284] loop3: p2 start 25 is beyond EOD, truncated [ 215.710868][T17284] loop3: p3 start 4276224225 is beyond EOD, truncated [ 215.718045][T17284] loop3: p4 size 2 extends beyond EOD, truncated [ 215.732132][T17340] loop5: p2 < > p3 p4 < > 07:01:22 executing program 3: syz_read_part_table(0xb0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff0a0000010000000000ffffff8500e931190000000000000680ffffff82000000e100e2fe87770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 07:01:22 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0xffffff7f, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) 07:01:22 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0, 0xf4fe}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) 07:01:22 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0xc00, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="680000002800310f00"/20, @ANYRES32=r3, @ANYBLOB="00000000045eb6"], 0x68}}, 0x0) 07:01:22 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$CHAR_RAW_PG(r1, 0x401870c8, 0x0) symlinkat(&(0x7f0000000140)='./file0\x00', r1, &(0x7f0000000180)='./file0\x00') r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000040), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x1, 0x0, 0x0, 0x0, 0x0) [ 215.736560][T17340] loop5: partition table partially beyond EOD, truncated [ 215.744610][T17340] loop5: p3 start 4276224225 is beyond EOD, truncated [ 215.753149][ T5086] loop5: p2 < > p3 p4 < > [ 215.757657][ T5086] loop5: partition table partially beyond EOD, truncated [ 215.767071][ T5086] loop5: p3 start 4276224225 is beyond EOD, truncated 07:01:22 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0xf00, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="680000002800310f00"/20, @ANYRES32=r3, @ANYBLOB="00000000045eb6"], 0x68}}, 0x0) 07:01:22 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0xffffffe0, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) 07:01:22 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0, 0xfc00}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) 07:01:22 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='gd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r1 = syz_io_uring_setup(0x76d1, &(0x7f0000000040), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x1, 0x0, 0x0, 0x0, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$CHAR_RAW_PG(r4, 0x401870c8, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) mq_timedreceive(r4, &(0x7f0000000180)=""/88, 0x58, 0xffff, 0x0) r6 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r8 = dup(r7) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r8}) ioctl$DRM_IOCTL_GEM_CLOSE(r5, 0x40046f41, &(0x7f0000000080)={r9, 0x7000002}) ioctl$DRM_IOCTL_GEM_FLINK(r4, 0xc008640a, &(0x7f0000000140)={r9}) 07:01:22 executing program 5: syz_read_part_table(0x40003f00, 0x1, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff0a0000010000000000ffffff8500e931190000000000000680ffffff82000000e100e2fe87770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 07:01:22 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0xffffffff, 0x0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) [ 215.962262][T17385] loop3: p2 < > p3 p4 < > [ 215.966737][T17385] loop3: partition table partially beyond EOD, truncated [ 215.985087][T17385] loop3: p2 start 25 is beyond EOD, truncated [ 215.995255][T17405] fuse: Unknown parameter 'gd' [ 216.000980][T17385] loop3: p3 start 4276224225 is beyond EOD, truncated 07:01:22 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0, 0xfef4}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) [ 216.013484][T17390] loop5: p2 < > p3 p4 < > [ 216.018422][T17390] loop5: partition table partially beyond EOD, truncated [ 216.029647][T17385] loop3: p4 size 2 extends beyond EOD, truncated [ 216.036133][T17410] fuse: Unknown parameter 'gd' [ 216.041086][T17390] loop5: p3 start 4276224225 is beyond EOD, truncated [ 216.172093][T17390] loop5: p2 < > p3 p4 < > [ 216.176521][T17390] loop5: partition table partially beyond EOD, truncated [ 216.186415][T17390] loop5: p3 start 4276224225 is beyond EOD, truncated [ 216.201867][T17385] loop3: p2 < > p3 p4 < > [ 216.206268][T17385] loop3: partition table partially beyond EOD, truncated [ 216.213437][T17385] loop3: p2 start 25 is beyond EOD, truncated [ 216.219495][T17385] loop3: p3 start 4276224225 is beyond EOD, truncated [ 216.226453][T17385] loop3: p4 size 2 extends beyond EOD, truncated 07:01:22 executing program 3: syz_read_part_table(0xc2, 0x1, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff0a0000010000000000ffffff8500e931190000000000000680ffffff82000000e100e2fe87770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 07:01:22 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x4400, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="680000002800310f00"/20, @ANYRES32=r3, @ANYBLOB="00000000045eb6"], 0x68}}, 0x0) 07:01:22 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0, 0xff00}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) 07:01:22 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0, 0x4}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) 07:01:22 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) writev(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f00000001c0)="5f30095c6583c8f82e41d37b65bd80756afba8bb9783c4112bd7f2fcc69a0daf879a3dcc43754fe2bb859c7b3f3ba97ea081bdbee2b6d3fe34e3361c7ba3d4c44005f02afbb147fea28e96107e6c2175f70bc11026dd1e00ed352dca04a8b32f8f6880f9bf661dd64549c08ef2c5664d910878548f491550ae62046bfbe625245a81b4fa1c8d7adb86", 0x89}, {&(0x7f0000000280)="16e2951e753746d8b706c6fd9e033f414e234a3bfd9ed83e9d4dcbd230e18f38850ba9d5b5a8cf79c46b1562b1ffbbbea42b0dc2ac6bbe6505f48f5600ff949a16bd877dffd53a45cf6dfdbc08f5e86751f94fdb8b47da9eb5c88e7dbc7fc387e0a5a0155a03053b303b856d3aa9dd60273d5533d07aea193403c336b6910cad9fcd6028291968c4769df482b1846c61a5bda7cd4e5b6518a7a0d885e80d703bfba6ab0bd369762618826eaede46868c2d1fe4ec65649815dc6db57a245225d057954041d253a3feed", 0xc9}, {&(0x7f0000000380)="da99644a73806c3f95a730843aeec6387611e35e7595008ea4e6810d97af1e140d0993951beedf418ed8dccdb8ce972e05e682a250afc244c02bc0f42d550682281a83b333cfeb143b89b00956145b4fb0bc5f7d20a3ba668a31a9d7d62a6a32d69f9f0e6a68b184309213e4712d81f6b690149201a067425579427428086203e13e6cb834c2ad400e3eaf08b841f187ae35c8780d6b3d071d4fcfd988f7c6100e2b9622fd4cd1cb320b0fd184095369a65ac58e7d3956b8c12fd2d3e356f5d702c14e1575fd9fbaf79657ede0", 0xcd}], 0x3) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB="bd", @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="b22e"]) r1 = syz_io_uring_setup(0x76d1, &(0x7f0000000040), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x1, 0x0, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000140)='trusted.overlay.redirect\x00', &(0x7f0000000180)='./file0/file0\x00', 0xe, 0x2) 07:01:22 executing program 5: syz_read_part_table(0x40004000, 0x1, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff0a0000010000000000ffffff8500e931190000000000000680ffffff82000000e100e2fe87770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 07:01:22 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0, 0x118a8}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) 07:01:22 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x4788, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="680000002800310f00"/20, @ANYRES32=r3, @ANYBLOB="00000000045eb6"], 0x68}}, 0x0) 07:01:22 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0, 0x10}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) [ 216.346444][T17457] fuse: Unknown parameter '½0x0000000000000003' 07:01:22 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x4888, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="680000002800310f00"/20, @ANYRES32=r3, @ANYBLOB="00000000045eb6"], 0x68}}, 0x0) [ 216.399613][T17457] fuse: Unknown parameter '½0x0000000000000003' [ 216.432229][T17469] loop5: p2 < > p3 p4 < > [ 216.440303][T17469] loop5: partition table partially beyond EOD, truncated 07:01:22 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0, 0x40000}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) 07:01:22 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = syz_io_uring_setup(0x76d1, &(0x7f0000000040), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x1, 0x0, 0x0, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, &(0x7f0000000140)=""/60, 0x3c, 0x12140, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) [ 216.456424][T17469] loop5: p3 start 4276224225 is beyond EOD, truncated [ 216.487224][T17480] loop3: p2 < > p3 p4 < > [ 216.491698][T17480] loop3: partition table partially beyond EOD, truncated [ 216.498822][T17480] loop3: p2 start 25 is beyond EOD, truncated [ 216.507137][T17480] loop3: p3 start 4276224225 is beyond EOD, truncated [ 216.514279][T17480] loop3: p4 size 2 extends beyond EOD, truncated [ 216.601918][T17480] loop3: p2 < > p3 p4 < > [ 216.606345][T17480] loop3: partition table partially beyond EOD, truncated [ 216.616611][T17480] loop3: p2 start 25 is beyond EOD, truncated [ 216.623006][T17480] loop3: p3 start 4276224225 is beyond EOD, truncated [ 216.629756][T17480] loop3: p4 size 2 extends beyond EOD, truncated 07:01:23 executing program 3: syz_read_part_table(0xd4, 0x1, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff0a0000010000000000ffffff8500e931190000000000000680ffffff82000000e100e2fe87770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 07:01:23 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0, 0x1c}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) 07:01:23 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x5865, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="680000002800310f00"/20, @ANYRES32=r3, @ANYBLOB="00000000045eb6"], 0x68}}, 0x0) 07:01:23 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0, 0x3665c4}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) 07:01:23 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = syz_io_uring_setup(0x76d1, &(0x7f0000000040), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r4 = request_key(&(0x7f0000000140)='pkcs7_test\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)='/\x00', 0x0) keyctl$read(0xb, r4, &(0x7f0000000200)=""/37, 0x25) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x1, 0x0, 0x0, 0x0, 0x0) 07:01:23 executing program 5: syz_read_part_table(0x40009607, 0x1, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff0a0000010000000000ffffff8500e931190000000000000680ffffff82000000e100e2fe87770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 07:01:23 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0, 0xfc}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) 07:01:23 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x6000, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="680000002800310f00"/20, @ANYRES32=r3, @ANYBLOB="00000000045eb6"], 0x68}}, 0x0) 07:01:23 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0, 0x1000000}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) 07:01:23 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = syz_io_uring_setup(0x76d1, &(0x7f0000000040)={0x0, 0x0, 0x8}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x1, 0x0, 0x0, 0x0, 0x0) 07:01:23 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0, 0x1c00}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) [ 216.846767][ T5086] loop5: p2 < > p3 p4 < > [ 216.856673][ T5086] loop5: partition table partially beyond EOD, truncated [ 216.864581][ T5086] loop5: p3 start 4276224225 is beyond EOD, truncated [ 216.875148][T17556] loop5: p2 < > p3 p4 < > [ 216.879726][T17556] loop5: partition table partially beyond EOD, truncated [ 216.888124][T17556] loop5: p3 start 4276224225 is beyond EOD, truncated 07:01:23 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0, 0x4000000}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) [ 216.913190][T17569] loop3: p2 < > p3 p4 < > [ 216.917609][T17569] loop3: partition table partially beyond EOD, truncated [ 216.953186][T17569] loop3: p2 start 25 is beyond EOD, truncated [ 216.959345][T17569] loop3: p3 start 4276224225 is beyond EOD, truncated [ 216.983221][T17569] loop3: p4 size 2 extends beyond EOD, truncated [ 217.022557][T17556] loop5: p2 < > p3 p4 < > [ 217.027018][T17556] loop5: partition table partially beyond EOD, truncated [ 217.034836][T17556] loop5: p3 start 4276224225 is beyond EOD, truncated [ 217.151924][T17569] loop3: p2 < > p3 p4 < > [ 217.156595][T17569] loop3: partition table partially beyond EOD, truncated [ 217.164252][T17569] loop3: p2 start 25 is beyond EOD, truncated [ 217.170341][T17569] loop3: p3 start 4276224225 is beyond EOD, truncated [ 217.177572][T17569] loop3: p4 size 2 extends beyond EOD, truncated 07:01:23 executing program 3: syz_read_part_table(0x204, 0x1, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff0a0000010000000000ffffff8500e931190000000000000680ffffff82000000e100e2fe87770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 07:01:23 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x6558, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="680000002800310f00"/20, @ANYRES32=r3, @ANYBLOB="00000000045eb6"], 0x68}}, 0x0) 07:01:23 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0, 0xf4fe}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) 07:01:23 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, 0x1, 0x8, 0x101, 0x0, 0x0, {0xc, 0x0, 0x3}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x11) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r5 = syz_io_uring_setup(0x76d1, &(0x7f0000000040), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r5, 0x1, 0x0, 0x0, 0x0, 0x0) 07:01:23 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0, 0x10000000}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) 07:01:23 executing program 5: syz_read_part_table(0x40009f07, 0x1, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff0a0000010000000000ffffff8500e931190000000000000680ffffff82000000e100e2fe87770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 07:01:23 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0, 0xfc00}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) 07:01:23 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x8100, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="680000002800310f00"/20, @ANYRES32=r3, @ANYBLOB="00000000045eb6"], 0x68}}, 0x0) 07:01:23 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0, 0x1c000000}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) [ 217.317258][T17628] loop5: p2 < > p3 p4 < > [ 217.323289][T17628] loop5: partition table partially beyond EOD, truncated [ 217.351674][T17639] loop3: p2 < > p3 p4 < > [ 217.360549][T17639] loop3: partition table partially beyond EOD, truncated 07:01:23 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = syz_io_uring_setup(0x76d1, &(0x7f0000000040), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r4, 0x4008941a, &(0x7f0000000140)) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x1, 0x0, 0x0, 0x0, 0x0) 07:01:23 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0, 0xa8180100}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) 07:01:23 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0, 0xfef4}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) [ 217.396659][T17628] loop5: p3 start 4276224225 is beyond EOD, truncated [ 217.410253][T17639] loop3: p2 start 25 is beyond EOD, truncated [ 217.428612][T17639] loop3: p3 start 4276224225 is beyond EOD, truncated [ 217.458498][T17639] loop3: p4 size 2 extends beyond EOD, truncated [ 217.563296][T17639] loop3: p2 < > p3 p4 < > [ 217.567725][T17639] loop3: partition table partially beyond EOD, truncated [ 217.575477][T17639] loop3: p2 start 25 is beyond EOD, truncated [ 217.594495][T17639] loop3: p3 start 4276224225 is beyond EOD, truncated [ 217.604084][T17639] loop3: p4 size 2 extends beyond EOD, truncated 07:01:24 executing program 3: syz_read_part_table(0x300, 0x1, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff0a0000010000000000ffffff8500e931190000000000000680ffffff82000000e100e2fe87770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 07:01:24 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x8847, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="680000002800310f00"/20, @ANYRES32=r3, @ANYBLOB="00000000045eb6"], 0x68}}, 0x0) 07:01:24 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c670000000000000f26", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r1 = syz_io_uring_setup(0x76d1, &(0x7f0000000040), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x1, 0x0, 0x0, 0x0, 0x0) 07:01:24 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0, 0xc4653600}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) 07:01:24 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0, 0xff00}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) 07:01:24 executing program 5: syz_read_part_table(0x4000a607, 0x1, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff0a0000010000000000ffffff8500e931190000000000000680ffffff82000000e100e2fe87770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 07:01:24 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0, 0xe0ffffff}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) [ 217.746713][T17711] fuse: Unknown parameter 'g' 07:01:24 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0, 0x118a8}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) 07:01:24 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x8848, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="680000002800310f00"/20, @ANYRES32=r3, @ANYBLOB="00000000045eb6"], 0x68}}, 0x0) 07:01:24 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x58, 0x1404, 0x400, 0x70bd27, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000000}, 0x80) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000300)='/dev/audio\x00', 0x40002, 0x0) readahead(r1, 0x200, 0x0) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000040)={0x0, 0xaa75}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x1, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='signal_deliver\x00'}, 0x10) [ 217.793165][T17732] fuse: Unknown parameter 'g' [ 217.815730][ T5086] loop5: p2 < > p3 p4 < > [ 217.820216][ T5086] loop5: partition table partially beyond EOD, truncated [ 217.828376][ T5086] loop5: p3 start 4276224225 is beyond EOD, truncated [ 217.839060][T17715] loop5: p2 < > p3 p4 < > [ 217.844050][T17715] loop5: partition table partially beyond EOD, truncated [ 217.851952][T17729] loop3: p2 < > p3 p4 < > [ 217.856435][T17729] loop3: partition table partially beyond EOD, truncated [ 217.866058][T17715] loop5: p3 start 4276224225 is beyond EOD, truncated [ 217.872016][T17729] loop3: p2 start 25 is beyond EOD, truncated 07:01:24 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0xb600, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="680000002800310f00"/20, @ANYRES32=r3, @ANYBLOB="00000000045eb6"], 0x68}}, 0x0) 07:01:24 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0, 0xf4fe0000}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) [ 217.911139][T17729] loop3: p3 start 4276224225 is beyond EOD, truncated [ 217.951098][T17729] loop3: p4 size 2 extends beyond EOD, truncated [ 218.015893][T17715] loop5: p2 < > p3 p4 < > [ 218.031913][T17715] loop5: partition table partially beyond EOD, truncated 07:01:24 executing program 3: syz_read_part_table(0x33c, 0x1, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff0a0000010000000000ffffff8500e931190000000000000680ffffff82000000e100e2fe87770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 07:01:24 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0, 0x40000}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) 07:01:24 executing program 0: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0x80]}, 0x8, 0x400) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000180), &(0x7f00000001c0)=0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000300)='trusted.overlay.redirect\x00', &(0x7f0000000340)='./file0\x00', 0x8, 0x2) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000200)='/dev/input/event#\x00', 0xffff, 0x200001) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000240)=""/114) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r3 = syz_io_uring_setup(0x76d1, &(0x7f0000000040), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x1, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r3, 0x1, 0x0, 0x0, 0x0, 0x0) 07:01:24 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0, 0xfc000000}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) 07:01:24 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0xfb01, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="680000002800310f00"/20, @ANYRES32=r3, @ANYBLOB="00000000045eb6"], 0x68}}, 0x0) [ 218.094800][T17715] loop5: p3 start 4276224225 is beyond EOD, truncated [ 218.133215][T17794] loop3: p2 < > p3 p4 < > [ 218.139842][T17794] loop3: partition table partially beyond EOD, truncated [ 218.150525][T17794] loop3: p2 start 25 is beyond EOD, truncated [ 218.166777][T17794] loop3: p3 start 4276224225 is beyond EOD, truncated [ 218.175363][T17794] loop3: p4 size 2 extends beyond EOD, truncated [ 218.184251][ T5086] loop5: p2 < > p3 p4 < > 07:01:24 executing program 5: syz_read_part_table(0x4000ad07, 0x1, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff0a0000010000000000ffffff8500e931190000000000000680ffffff82000000e100e2fe87770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 07:01:24 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0, 0x3665c4}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) 07:01:24 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="dc04"]) r1 = syz_io_uring_setup(0x76d1, &(0x7f0000000040), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) io_uring_enter(r1, 0x1, 0x0, 0x0, 0x0, 0x0) 07:01:24 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x34000, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="680000002800310f00"/20, @ANYRES32=r3, @ANYBLOB="00000000045eb6"], 0x68}}, 0x0) 07:01:24 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0, 0xfe80ffff}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) [ 218.188700][ T5086] loop5: partition table partially beyond EOD, truncated [ 218.200873][ T5086] loop5: p3 start 4276224225 is beyond EOD, truncated 07:01:24 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0, 0x1000000}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) [ 218.269626][T17834] fuse: Bad value for 'group_id' 07:01:24 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x400300, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="680000002800310f00"/20, @ANYRES32=r3, @ANYBLOB="00000000045eb6"], 0x68}}, 0x0) [ 218.302401][T17843] fuse: Bad value for 'group_id' 07:01:24 executing program 3: syz_read_part_table(0x39e, 0x1, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff0a0000010000000000ffffff8500e931190000000000000680ffffff82000000e100e2fe87770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 07:01:24 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = syz_io_uring_setup(0x76d1, &(0x7f0000000040), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x1, 0x0, 0x0, 0x0, 0x0) clock_nanosleep(0x1, 0x0, &(0x7f0000000140)={0x77359400}, &(0x7f0000000180)) 07:01:24 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0, 0xfec0ffff}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) 07:01:24 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0xb60000, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="680000002800310f00"/20, @ANYRES32=r3, @ANYBLOB="00000000045eb6"], 0x68}}, 0x0) 07:01:24 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0, 0x4000000}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) [ 218.442088][T17870] loop5: p2 < > p3 p4 < > [ 218.452081][T17870] loop5: partition table partially beyond EOD, truncated [ 218.472714][T17870] loop5: p3 start 4276224225 is beyond EOD, truncated [ 218.482139][T17873] loop3: p2 < > p3 p4 < > [ 218.486629][T17873] loop3: partition table partially beyond EOD, truncated [ 218.500089][ T5086] loop5: p2 < > p3 p4 < > [ 218.501657][T17873] loop3: p2 start 25 is beyond EOD, truncated [ 218.508506][ T5086] loop5: partition table partially beyond EOD, truncated [ 218.513849][T17873] loop3: p3 start 4276224225 is beyond EOD, truncated [ 218.525605][ T5086] loop5: p3 start 4276224225 is beyond EOD, truncated [ 218.535415][T17873] loop3: p4 size 2 extends beyond EOD, truncated 07:01:25 executing program 5: syz_read_part_table(0x4000f207, 0x1, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff0a0000010000000000ffffff8500e931190000000000000680ffffff82000000e100e2fe87770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 07:01:25 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0, 0xff000000}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) 07:01:25 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x1000000, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="680000002800310f00"/20, @ANYRES32=r3, @ANYBLOB="00000000045eb6"], 0x68}}, 0x0) 07:01:25 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0, 0x10000000}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) 07:01:25 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0, 0x1c000000}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) 07:01:25 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x2000000, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="680000002800310f00"/20, @ANYRES32=r3, @ANYBLOB="00000000045eb6"], 0x68}}, 0x0) [ 218.721235][T17873] loop3: p2 < > p3 p4 < > [ 218.726848][T17873] loop3: partition table partially beyond EOD, truncated 07:01:25 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0, 0xffff0000}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) [ 218.768678][T17873] loop3: p2 start 25 is beyond EOD, truncated [ 218.807320][T17873] loop3: p3 start 4276224225 is beyond EOD, truncated [ 218.818790][T17873] loop3: p4 size 2 extends beyond EOD, truncated [ 218.833761][T17928] loop5: p2 < > p3 p4 < > [ 218.843117][T17928] loop5: partition table partially beyond EOD, truncated [ 218.857264][T17928] loop5: p3 start 4276224225 is beyond EOD, truncated 07:01:25 executing program 3: syz_read_part_table(0x3d1, 0x1, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff0a0000010000000000ffffff8500e931190000000000000680ffffff82000000e100e2fe87770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) [ 218.869668][ T5086] loop5: p2 < > p3 p4 < > [ 218.881522][ T5086] loop5: partition table partially beyond EOD, truncated [ 218.888884][ T5086] loop5: p3 start 4276224225 is beyond EOD, truncated [ 219.022674][T17928] loop5: p2 < > p3 p4 < > [ 219.027156][T17928] loop5: partition table partially beyond EOD, truncated [ 219.036023][T17928] loop5: p3 start 4276224225 is beyond EOD, truncated [ 219.044709][ T5086] loop5: p2 < > p3 p4 < > [ 219.049152][ T5086] loop5: partition table partially beyond EOD, truncated [ 219.056927][ T5086] loop5: p3 start 4276224225 is beyond EOD, truncated [ 219.063403][T17958] loop3: p2 < > p3 p4 < > [ 219.068349][T17958] loop3: partition table partially beyond EOD, truncated [ 219.077236][T17958] loop3: p2 start 25 is beyond EOD, truncated [ 219.084553][T17958] loop3: p3 start 4276224225 is beyond EOD, truncated [ 219.091393][T17958] loop3: p4 size 2 extends beyond EOD, truncated 07:01:25 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = syz_io_uring_setup(0x76cf, &(0x7f0000000040)={0x0, 0x0, 0x4, 0x0, 0x8000001}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x1, 0x0, 0x0, 0x0, 0x0) 07:01:25 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0, 0xa8180100}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) 07:01:25 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0, 0xffff80fe}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) 07:01:25 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x4000000, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="680000002800310f00"/20, @ANYRES32=r3, @ANYBLOB="00000000045eb6"], 0x68}}, 0x0) 07:01:25 executing program 5: syz_read_part_table(0x4000f507, 0x1, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff0a0000010000000000ffffff8500e931190000000000000680ffffff82000000e100e2fe87770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) [ 219.221836][T17958] loop3: p2 < > p3 p4 < > [ 219.226309][T17958] loop3: partition table partially beyond EOD, truncated [ 219.235649][T17958] loop3: p2 start 25 is beyond EOD, truncated [ 219.251555][T17958] loop3: p3 start 4276224225 is beyond EOD, truncated [ 219.265559][T17958] loop3: p4 size 2 extends beyond EOD, truncated 07:01:25 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0, 0xc4653600}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) 07:01:25 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0, 0xffffc0fe}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) 07:01:25 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$hidraw(0xffffffffffffffff, &(0x7f0000000140)=""/48, 0x30) r1 = syz_io_uring_setup(0x76d1, &(0x7f0000000040), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x1, 0x0, 0x0, 0x0, 0x0) 07:01:25 executing program 3: syz_read_part_table(0x3e0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff0a0000010000000000ffffff8500e931190000000000000680ffffff82000000e100e2fe87770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 07:01:25 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x5000000, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="680000002800310f00"/20, @ANYRES32=r3, @ANYBLOB="00000000045eb6"], 0x68}}, 0x0) [ 219.375675][T17996] __nla_validate_parse: 48 callbacks suppressed [ 219.375683][T17996] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.2'. 07:01:25 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0, 0xe0ffffff}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) 07:01:25 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0, 0xffffff7f}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) [ 219.441531][T17998] loop5: p2 < > p3 p4 < > [ 219.447225][T17998] loop5: partition table partially beyond EOD, truncated [ 219.474215][T17998] loop5: p3 start 4276224225 is beyond EOD, truncated 07:01:26 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0, 0xf4fe0000}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) 07:01:26 executing program 0: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = syz_io_uring_setup(0x76d1, &(0x7f0000000040), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x1, 0x0, 0x0, 0x0, 0x0) [ 219.514540][ T5086] loop5: p2 < > p3 p4 < > [ 219.523731][T18035] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 219.524754][ T5086] loop5: partition table partially beyond EOD, truncated 07:01:26 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0, 0xffffffe0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) [ 219.568119][ T5086] loop5: p3 start 4276224225 is beyond EOD, truncated [ 219.575560][T18035] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.2'. [ 219.581776][T18042] loop3: p2 < > p3 p4 < > [ 219.589376][T18042] loop3: partition table partially beyond EOD, truncated [ 219.602890][T18042] loop3: p2 start 25 is beyond EOD, truncated [ 219.609588][T18042] loop3: p3 start 4276224225 is beyond EOD, truncated 07:01:26 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x6000000, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="680000002800310f00"/20, @ANYRES32=r3, @ANYBLOB="00000000045eb6"], 0x68}}, 0x0) [ 219.619071][T18042] loop3: p4 size 2 extends beyond EOD, truncated 07:01:26 executing program 5: syz_read_part_table(0x40000800, 0x2, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff0a0000010000000000ffffff8500e931190000000000000680ffffff82000000e100e2fe87770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 07:01:26 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0, 0xfc000000}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) 07:01:26 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x2}, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000900)='/dev/cuse\x00', 0x2, 0x0) r2 = fcntl$getown(r0, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x1) setresuid(0x0, r4, 0x0) read$FUSE(r0, &(0x7f0000004300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x10000, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r6, 0x6, 0x15, &(0x7f0000000940)=0x1f, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x1) setresuid(0x0, r8, 0x0) syz_fuse_handle_req(r1, &(0x7f00000021c0)="ab6930950e88b50df02fe0387ee769e5f9a6c6782c44b6e6d6fd2cc44b51cb3e708fffe1ab5f6a1468a6111845adc2a4519d58b29f9c3b32eb87aa15103a7bd93fd1b8abc820d308a169b18ed4538b304197f97dfacc4fd9dd179beb34fe4749a4f19d679640fdd9e1bacaa81a7b0a0f3b92b40b04562ca10cf521e26929e0a3ed4fec6c75de59c45b28aaa918c99a2f7edf4c8def4b799382c9c4f4eeb3962aac59f6f494197dce8914f457bcab08a66ee7854c40ec8ab90ea43bbabfc145ad440dd9120691c3f23c0a9c6fc02386a684b8c0f2fc03d67c27e20e545f438af646edb7e45fddd4dd610a25e3434d9b6cdf428c3ae7df2642f31fc15a3c5f0459d614712e4474a9e1eda2ede17a92b3af828fd6cf6cc76177f475e5b2818df80e13b92e480c4879c62e24d62ca9b9d2db28bc89cadeaf4290288eff3239d8347dc8edffcd693cfb40ce4aa48bdbfeb26ed7afba86173bb0fbc06398b04e020edad70915a63f33a4f8858303d365db2b5b17272df07a18063c2021e731e17167e42ab8386c2a99f10e4d828aeac374cefb4559980247539a5fed8470e08da0f2e6105f9a8b2b87b2a411848e1140ce9312a3b0f2a6c5e1d8b5edb5a980b20f3fce82723c387300deeaf3a4045ced289e60d6317c8952fde305274d81abd77b2bd6bda2349097bfbb84047c0807b0aa20a4c35e5b01816b56b669fa4f41716902416d09da940bff7867b505c7e7c14113a17a38ab6afd89b7ccdd5ceb5bcaaae21b8d77607bd9dd9fce5aedae7f9701639830728702bfac721c2e8a7ff506877d262cc1f35145093762dc26d50865b3cf9a2f0a96480d38647f464c21b706e2565dd70745c90fcc48a02aa19b1797b7e807809e8141eaf61a7bf5b2484f2530199ceb1608d950e52d6fe2313a2ddea416b982826ad80865ccdd95f7979b243f4e0eccfe0461221b5c3cc89f13443419d0347d0adc94587a6190bbad6fc21087173803411889e6c2bab970b85dc4fbbd1e7a61377e418e9fa2eadf14876d86cdcb8cb0c39df167acc23e2ed1f7997571aaaab5093024dc10533d4ec970f7bb46d4cdfeb952ef1bfe39e0ca5e510bec79107028f2561a8095b9860cf0bf87a907ee57af544ab1fbc07cf3d779ccab7f505167d44d695d7eb05ac7b168420dc322f7a986e756e6e09389d327536dc342a2f45c69b9fcda306c4c2b829e801168690da5afa139dabcb61a5122332d9b49ba91d9ecaed7b19071443d1610541da490c6fcc0aee78d8a64bd489fccdff208f80c425874e0e789927655fde26473051321dfa68150d41403a69b273a837399d6ae26be86841b9dd2161c9f614f614742f3a83d92b01bc8fc72e714bf81d49d3be32f5f313293a1edfedbda58e93f3563a249339aa3a9db80aef06d6afe4be254c811e549c5e545020cafc29eb284396858bb094f955bab8eb565c2dddab1c64e58787df15f17d1f3b4279574df041b2c4893e3652ac91b5f7fad2b104dadaf4868c5882bdd9dafdfc6a3415825a426ab270e0908dd001d39355e43ba70f2b7e4c6ba07e2e8d8513649f3ce7695df2d45e36166434d07daa9d301304a8641527b0b87de5a0b37647483f7ae0d8ff8462bd51e504d29b08f303f9e2ac48fec1e0729f66e48b1a639fc81ecd31fc1e579861e38034bc526f1c0f5527bd2eac927d5ae51e93dca5d0d7883ece848f18a55f034862e035094e7e57340be3b78e7192f4a7446bed49b12e27867995d0ea605b7d7ce45680b8278ce5de10c1585c8e34c1d24cb9d72ac0fa85d44e80505238a3062950feaabe801a13ed54fd5e3e69e0a9cd5c5e5e4eed50c1e7013319feb38de865cb9957a46da8cac24dff338dbc13aa7aacb62a7b968bd4a5fc2b37ed37b7ad41888261d4549711df57538f19a16d155dc18392db91170778328b3b22b388cb1c5735ad104d68b161451208282593db60c54bc5dce9c9430dff2f0d12f4941d2badc280c07f7e1675a717bb90e489792a96cbaaba761e9f7f1066cd1530e15b1afdec52e913ac3d0a83f40e304876de288f20026f5923dec78f1fbe45233347b5ef22317861427caa61f15e43a44e7c9213405b4e0052c22895113581c78df2b0b232d4b5fffcf2b1734794f179e11f93042264f9415ee245bc371898adb042bc4a51c7286b0b544847e6b789ef93956201c940648ba17bede369e372a2992b3d9687601adeb47f3333094063d261c0de68eeb281c34d867877cc9326e3f6483da446f0b823916adb7c9c1fe6027448bba624e0b62485521e09327bd2b026e8c5e2cae94d848c7d639600364787a91042fb6d371a3f78ab2ac8831259eaea2d19a727e85792d1c415bf03f9e8077b1065ae6b9c5bbe6bd85a8b3961fe0ba6fa69bb249bbc8e196483aac775f8937d5d0b891c79d80c784b69f1fd51f10496bcf48cb3f07009f663e1cc3773d37ce3ebc59b9fe5a7cfb981f79b3ae0d2a661a061a6f5db5431045ca4d4de0ff7724a1d69953d4d4855c81bbfe37f55ec89dbd4afd7c084d40550a409f2eae3ab060895615016f797fff33a12ccd70f6ce8f2ebf84236c28ee2e2e587c19af8551597306f9973c11139063af8d903e3a0cf5feea534e996da1eb91b9749d029116ba5c884f77b71b1a2b965a95bdcee489918ad99aa50d360d03862a70b6770e5b359f435143119c6ae46738e96b00ee9d5701eebdc5301a4b2fa4af92a0c00ce7d8554c9cfc1938ed36787b030e6f1319fa4cca8f8003ff0e2c04b2fae1a43135b10f4cbed5df03cc38581a70ee5ea29815e99a441263cb740bde9808bfa157794e00782305290ea494cf46300d94a68778a0f89882c505525e62f390f46cbd56c2f8c372d41a05172d0737d1ba1e340d8dd551b45e82650e482c29fb3f1af9e63680453cfda2fee07e4183329b12016de5dbe7483819f68ea7cad9c142b1ab3bb65950f389d84d2d1a51b7aa8f72cbfe31847e2a27e39c11e3bb7ae306df56d91eee2e2d7a9e2d828f0fed7de5268c6c1ae6202e6bea3ecbcf6f1bd901356ddec2e7abf62eab55f125c165610eeea137ede978abc744be87b2d89a687d713e14ba64e77ca8ee4d4e24962c2c5cd32f4c4b5c2f910b079c7104e42f44c40dcf3b5d86072cdd8c6547644de446229ecf34a33e6e796c69b84b940f917b7353d61c29191850188406c2ffbe8b203ae53f051b1f9aeaa28aa23bc0d62b3670ab151e387efbde524780ec10e30ba627144d77c6689476bc8fe2e6ad7642e34819a86be35d8ee37bfb022d92ffcc48d05f2a435205c9117c04a29d46bc5d46a9d849cfaba235a1469395f127c6438d704fdc1155bc73bf513f1c5d73e49e048a8fe9f09f081ed2fefb69f8929fbab2d965a8f49668ebaa36c7de828dd0ae1b2b1fd6edf671fb219ee56a3efe719be849f804fd0c816ccf635799831f7e3e7e10943ffbabf4e310e8d9584eea61652ba7b87e3312a4b83515168f38e0de0ac92eede9eaa8d3aba7492622c7085f7aec13a99661c53721ac39139a69ce8fbe9bbe31f905d3e78fb28b09d49cb2ccf8fc7b62f12e1e17d7de8132d03567ae512be146cc185b68bb9603da78d9b43cda39a583c4106b020d7ce15156adf0c3deec4a584afe8713276956bf5c1b3ec8e73041eab1be557da1a146476f0e0c2b088cea27d87944ca29ce3a8aa8376d8ded6bdb5060c16fa43bb7664ce5f3541a5738fa2ea69e09192e47d956564a65aab55823bf9d76c6f1bc7c54640ab225bc9bf9ccd34bde74dca5e94c34a75dc31102492e2c8dbcc8deb9343a95741108d833dd9af433ba565d75f5a7b085b3d4d628cef0dc927180291e0af484ea3c0a65456b0afd929c2141d232d343991e47cd5bf0efbb5a04d0c802179287f1f23623387c2281875848712e50578f05bf2b33f0cc895f68e7ee4c9257f74a9086754d34766eb976ab92059480ccce80f5cc93dbadfe119317748af9c79e9f4c7cbee3819f4775be2297722feb094799bafad509018b1a8cee3cf68d93d30e0bf02ad0435b841807dbd76eceb9264d0a6ecd974c42712a2df498deb4cc59ddc6690e98c45d16f16f98406b828dfee639f6d760c17f4d47a66c079e90ebd6bc3c03c0a78dfd72cc2b80d354d4387857919cb2f1056b58f7179ee43eed22eeefd2ee192158ab2278fc395efe7f00c7d0869bd84c65a32d77068876c91cc634c40ef89773dbb35edacc32799efb1c065d7c7ddbc4171fd0b2f128040dec08f9b2c526eef6e9870fc5a85075cbeaa0fcfcc5f064d20c8274277e94dab44091a7f013243d6ab10061c95b13dbd15c7b3150997ae8da78db2eedec894f4a3aa9965c0761d3d75c099be7fb3beb203243edc16655dc38d09448ddd68359b81e69ffa3b1674ab870c832851f60d5cca9189da7abbebc23cdbfbd754625f2af4c4fecf683711d1fc32d893d42885c5475b8a6d1b77aa5e8d26ae0da01da9b4ee764df559429b9b54d0cd797462d802e07e6aa32d87bcba7d8cfe8238a80fd75f61b80e8659dc7ba7df09330715b680e0c28ac96273f7b068c33fc823a6bdd99b5e54dadc3dbb630845fd1d41510a2a510f61c8b0e73a34dccff72fb509223361b4f811010a13976bde4f21c916605aaf7393da10f8937f04017b49d82712e2eff2535700dcec897b0a677a7e1d4f14faae8412ca3e8fb6639a2ddf43adb3dfadc51ff1c8ca3e02e4683d9c0890ecb227d0eec307a4f2f2fc74bc5f5ebcb04ed37c4cadfb39d7914b4f316d0361ff5880875f80463dc9a3a85fa279a6c0eac6824a0622d2d200bf0993c783320d92b8630191e6dec4f04f8ccc13f1c55b613561b1357f34e765e268719df9efd984cca39f0ac78108effc3b6d826648683240dc2daf4b522034c0f025ce7f0fe62eecb2f1c688a56333513fcef1ac12409391dda6506730035d73f64a2256b1b7ad66026b4cc86a39b3c77afd2a777411cae3290e6b3598fce1b314b3ecb9d7b24e7f86f93a712acc2933fe216db0aba76a4f2cce5280f8f29ab8f9c638fb0d6e06fae2fc7f5bc0be61a2e3add1e7d30589d0e15dfad4f253b5bd719977ca927b3793817e2ae7c996768f74d1636cae98e1cb72b77c1b256694518b6d7116d456196ee8e33c090cf176f8597291a946410d43519b0660c29a1464c3be7c382ae48df09e356f0fca815fb84ccc72965bd70246630c77526cebf27600267a93a5741d7459909d4be482aaf2fbbcff7b62257516b3339945ddf5a476f8be85d46c55b50cd265f81a073df2619cebfd12e16f1113b1b1b13ebfb7452f841852d5d49815eafd58037bdeea51ea9a9447d2645b6c9bec5060960b05c508984876aeda5c14ab5183b198bd55b76f3003462551e7899dd13ef7b0db0747c112f76464d652384b11b797c504f0b3037c399e6c91cb47925947c74b998c2179f8e0cb2338ed2fdae04326abbc3c98828d78b92cc3c4bea948898f2bf1ed3de26db4033c731ee3813f06919d13c8e5a86306a7493df748f9614c4a4ce5e98ae1f2c0ed0fb6956607e1e5bdc09f4250780ef18dbfe5eeb42bb5ae3727ca088434107a588b2748993a1741df7f075feeeeeabc75c95055c2f0e0a63e8885bc13e6422d1a02dd617df59e12b3ef7397a94cd6ab383ca5471c4756e888cafc07fd0bf5547f3f207427841553988ff3bff6d1fba80a182145dd77ac22d7485344ccca5c289e37abf928002ae717e19efb01f0762abebf071cacf0d900df13c8e216a7950e82461b80c44c9f97b79d240e588780049376b569f415e1721ec7c86264b94dae8040144f315a0d961031854d439c6713584f3503c058e95b78bf98adefad366a2290df12343592830aa9f81b112c03cb74aee3ed6e104f81978a9fae71ef6e9c01b4b734f22bf5d0980afb578c6e9fd4a8c00540665755dcbab024450fd20176bc102b2d724599e09600be4087f91583d7071409140be1836d04d59bb17a5c5bd35a2f69c4bbd41cbf4b89fcb47d68d3d65053eaa4df9094737679880c6d0b42d363212337ba8cb5e8534c5bc039c877fadb1622ba8a908ca5f57bf625f6f8763bbf9c4eba3708497ebbcafe37b8775ba4005d111fdb43c43cf5d73371faaefc0f1b04cc197f56c12ad651bb53b383821163b53c9485fe50d67744793dec9fe2da681ecb54e17df4edfda22a4d0f4d9580f4ab80db1daa6e3c1b474a55ebe4ddb2329b59bf21dcaae43615400d2fb07c9f847868a005648a33d5b14fdc242368304b012c287fc7d7469c8b42a1fe28fd0893700ed74b73cd2c31971cc1855f5af7e1ad351b569a8c7866fcbcd78d4acaa38fd4d9c6cadf190c87edec22f5bd18b04a16079a4302732070cdcb341470f3a50141786335f81e59952504eeb73e45d39ce5b9e296b54e6502c8d9f00b5e8902b941e54efd58b3ddb25bc09fd0a410f31213af5cd1dc6ffbad555ae510b37e4f8c155f3f9add46c20477eee479e5815e7161db16adedf7a3a08d708058a5e738a45221036057ef8c16ee4eb7490802c141d7dcb0b9d996e0da374b4b2984aa0b0bbdec42f114453d41327ee49937ebcd3cfdc3910604c25fcb16494acc06939cc94f484a8822bbbebd182be7922e32c2ab054cb54fad2c2767d419c76c38b6eef5b4f53219f1d6af1efeeffbffacb94d2ce2a158e4e183fea17edab92898b7aa3ce57d8e04a2134c1114dc6a0df77d5b7292191f595dd9b304930f1826b131c7a4377417e9c4aa0db01f4fbaa2b072a86c4633945906802954fcb1738e8be715e8dd5c014863600e9957c8ac01821aa93dd6c42ad8ddeeb48bf2d3c9a5547b18172b27ab4e653964d14906c5317c86c86ef5ea0b13b78c825c013c5c4d4dcbe1a26c16aaa742517e2d2899ed8bab794a59c799db80164032d872ae788fc0f2dde764926741468f9c5cc06d4243afc059974a68234b3a9301083f6a376be4dbec2a5e0d9ed4ca31b8270e9843f9b805aea18558c791494d8200687bdf7b244f9687d7a9c2a39073a37bd111f6674f032f0dc119e6b00edfc451393bff49852dade8adbdbf03531daf45fbc4b6ae065aea4586a49f6abf9649515121fc1a8a8701c3eb421e73e391af74447f333b9ef18cc8c05ff3dfc11b3688f2c13dd3afb916286b2d7f182632b1b071be36d2e983c8c32df8b2abd4ebd6fb562f45f6cc25aa8e07ad9f09e1ea66a27825d986ce14c53e1eb57abdb185aa32ac7d1b4635118809d7591ff3221121b760efe39a932158d76c5ead5fe5b76436f728a54c04ae328c3f06973443e4028e99028f2ca0b414f186b16433a1423ce1b7a58df5b1ef4c7ee679f2f0920c9788e723d41ced434d5df564bb8cdc6dd245a79ee0e9d0e0aa00d298c91f70d564705f2fb4e77df5817e549863ac4a715deab72c4b8b015a1eecea040afb054c2106c01dd52725526aabac4ec3b3c5a2e8c58f4690cd319314398dc13cb2166e53518d48c42a5d4d3217009091cba01af9838e0bdb6bf28df731ce0269e5b6602a3578fec0ea8cecd608c9c402509c24e4309b3ae6df8a83c0be30ac0d54bf10fcebc7c03d3d6427a84c9716f6ece3a4ef09a1904c9ab885b8fca236af4f57cf35c972572fcbc8ed7dde3d7bb226835b761e78d46e7f71b90a26237da710bff440cc0fa32a3766bddc194069ef6513087ff56262a7e397b8db3029320fc97d161375e88cd6fa8c7a5e4258f18daa8d246898b5437121d8dee5b974900c0dee5a9b0aef952a8c631b4a61aaae28df6fa3add72ec7bf85ea5bdce600cbe9aa2bd6de1e57f96feb4b6ae159450d5f458e16546060f789c9f3117cb8b94b138df58dd9f75dc34048c2e034a9924552760fa87ecbcd6cb3e869f3d519c0d344224f5386da9584732a7f218bb85ba4b278c58ab15371683856183ac583b688c7657e3b6ae00551d8ed3a74c94762c016bcfaf8625e0dc3dab7c475eb939ea59aea7e93293378d4dbeb8c354e895c9616605a9e58289ab02acf84ef05e8fbbc83d859451be7dcbfa758034a7c281ed6197bfc86efa6eb45a9f65d013be3b6ef63c15f89aaf82b3be975f86cf6f9f593ffb14f2748bff303d31c0c047435ab68f4bfbbbeebc988a8de144331a6520821eff1b55291823384d12f3a95a7797831d27cc3622246e9ade45049ff4d53a774ff9aec68b885c3d5ff21da97d9d7d3380de152259f3b844514670d407f621d64d7fffbc7c381864ead11397ce107425b64d34b6428cdeb824431edfb6239b2247f8ea39d3e4df6d10f74748e0e75bc569fb7b4e6817171468f6da872e671c28a4c9d0856f0ea26961f1a804eae47189f722d2b4e59ff96c1fe3804f68cfc2420714af57816a74f4440ce6973770c8bb68bccc084c3c1175b9ab7bc5ae7cfad0e1d2ffd4d75a722b38f31dbc3f8bcd41c3ad88cf962b76718730e1e054dc30abdcc47763e835c8877c6a1fbb169a92094d3478074e0bb0712df9bf989e2b1b15d8f781b21dd54adf7185fcd4d57c9cfaf329fe6061e91356dbc37ed06bef7d357a6f575336794a991818c19153f6695a73e6ca10fdea1129ac07b9c28da22d960e29b15babe548ef576fd45f2f9f3f22972c64a96d2a316a0db103c73de9bb56b3ac476f94b47959b183e8dbae172f59bdeab6571ab864766cc5aef65d743830bac2dde0946f2790b10828f152b9fcce618321ae24e5ebd76eee1fab4f8408c7b0571d59a0a275c5aba582bda104ddf7842b09e8c42bc2bb27ebfffe53bc2b13e3f414781e845395fa1a2e281eeae5864638b5b582d8af90ba0b9a6951b5b7cead935c0ff47708b41d047840998dc7895984ada9f71fc31545352e74a3ab63f36f53de5d8ad8b6b31e2548b0f62de7e4535e8bd2719aa14554f1b9a497576afe91b3f26d5ad09d6df54194918fa65d73728f67f202b82c0930789f9000f350a85687d83f9cfd1a4e5b6cc80106e759bce10ae49f17436fd5d09ba2eec550215d22b2818dc190637f7d015a5e3fd56cd97d7fe36a93024e589fb523ddb1e98e7e526bb041e076f5c368896e2b93dba8b80fcfe537d44cb378d621dd30e77490494d60409de63d49d6a98285eebcc3aabe14e50e5fe67f5b9a09c98439e03c2625f06e64ddcda499d3b36f34dfe6ae82950f5f427d903599bc8cd5a15c8f3a12894f17bd25c4254111816210854ec23eaff17f4742aeede327979e54e0105bd0ce9d09db2f146c1408222ccc66e46b67ccaf3c5b2a9a9b4e705e99ebf62df0fec8b65332632de4c6da3871adf82f64992eac1a828999d142259ed721e96dbf513938eaf34f28cb3fa9744f34b52a93fd9eddce8f274a4d6f47481a05662d21fd31b362bc01756223e15acd70786b624a14872113e376d5e73f43fbd1c54dbc0be648d5d21ae3de9b6771604776d41a4402651c7cae2bf1a0a1cb224cfccec071b6e1c12b911c1d3c0ae7ab810ccf27972775b109adc818a85787ac4ac3d7781a5d6b5b55a21360d90c1df1a433500f95e40fa6c67f95311b0598616592541edf3d58ed3fd6ecb7c64ac5b4c6f4168b08730c71c5e20aaffcb0ffa10d60095689ef070ed9e8e424b38ecd195bf5e4ed5354faa7f2a05ad7273bf4212b1f23107f4ac0c4b579afee31498a8dc209e1127745006c09b43bdd7480e5d3daffaee63346c108297600a1855f291617ba773548abbee694ea6fece185dea2c3d7618e866df1bb2c190001008d6d90cbfb94140550903f352e9b16a777d2147107d0d560dcc8798e6eb31442dc80d88d606cab307e76b0c8d5d310e8cce010f0486a24c39a893e5b18ab4640fb0e932452e4277c53c0c66042d48cf20da68999465cf185b9daf73fcb3e2c982558e20b8998445197dd4fc6e8a562b878c140cf561cdf8ee74fc0e8a6f58bf5848f078cf86dfdd6ef0c3d241423a0309c6ba2e5ae69a6d555d44c0eac1f5485a532848fca23b4159ed5156dbf683fbebc5852523c310b1243c35e84bf44f4aadaaa280111cea6a58fa9024146af48aabd1e2ce95144f39bc75cbe91cdda7deef6e2f65829c1ec9624c6094bd864e4c81cfd7df627164704e6b59915a85683f403b1ab08a843c85a36aa4de6c6b54e715f275887f8ec92dcbba4c2a3621261f0e0e8800ca06c69030cf64a03273ff53ae0b4a2c1fb20bee568686900f0a013b95c1b14c61adb67c2a0691966a6651a8d891613fa5174e15930b67dc7d6a5f86e4dda160204a8a7050cdaeddab6a1256bdc212aa75845a42a9a6db069a9c741c929d809b7a37160e1f404cc6e1498962dc1a6db045bb9deb3b8b037ce413160ab1748edafb4d600ce4b07defad7c5c7ac0c527c4766423d1281f92ab8801f414cdbaefd85a34cc7f022e989dd1af160fa433b10ba562faee3fd7ce9d92dfe75926f71e52100dd4d67a73822a19c7dd72ded97f056627f4bdc9d329ff12ffc177296365973db156a9cfe8ea739707f7ebee825dccb2bb8c3131afb5fc795b5e697fcece962680a63d7dd28ad77df3f87e1d6b3c380bb879fb0c41520c103c9c45564f7cb5c38306869a34ffc546fdc819898fedfec27a962d4b45c963266a866a8fb1ae10f8e657932e970ebac63ed4c6f41614c1ed2da0983ce86695b8dcae302ecb4ae8b14047622a14b35853cbaaf0daa3ac95122c734fa6b3260e41a5ad8923c54ca2ee8823632747e117aa3ce246e51a1e1340ba55bbaa84246aa38035ded04ee5d05e0ab94d5efd0c0135ee2d8ba0d1c7d53a182dbaf3fe2d130d3a5e6e4894bc8092753069ef03aa0fefdcd2e12fe1256938aa6b3a33cf447cfc0f1037c5f7226ba7a1695e9b1b39f5f596fbbd4cbe88996a5e727ad5f5c12677e652a59691027ee9ad15e53bc1d3ca677dd5fa3b629d63ba75ca52a349bb97b515c2d7dc4cd0bec42a81dc477cd60f926e791e152e2eef3737f344f1f3c64a5abf2d1854a43078830ef03997e02425de7b51ac5cf54a1dafb214235d6ac134dbec4de2c57c26eec8a3bde167a1889909a8205c4b68e75a9abd2e9df8a0a4b252650740b29be00e42c898ad5648499074a35e862a9504f1ca2cadc67e8f246e7209b3c724867a3e6dcb3ab6894951cfc4b5e6e390f2f96b64b84d62f429f3a6adaa0ac029316d320c40164cfb30c51e5c86ad3a78a654f23c20607bf4e2808e12f5d79465bebc10b698b75feaa1aee1e94889d0fcfdcba8dfdb82817e3dc6c207f9bbb9682c86d2ce26cd74997e93a2c58de5f6e957acb7d1d48b55bcfa6f66aa4ed70cf159b4ad619f4c44d62573c55f8298a1b14b4246d6c8d84bbf616bf90f63e5a2818ac55ca09dd1c32ddc775d52429b1b9aa270e3341f4021e94dec9d812cd4d16b1b9b60ae45ef9205d8423f28c46a6b5df1b4229732aeca32b9ada8d595fd769bc82ebaeda143c8c2e875eba02a8e80c0a09ab278d8e5e3e31fab7ffafb1dee37c8b5fde821cfcc5d7d39ea9d56c0a7dd4948575c1e63679eefef1a9c72f605beebdbaaabac1a6777a782577248aae563c5c67f5e7f9fccf0214f16c40a0fc0ffc559437a6f9387b3e60a2acb054cbcae73c1fcdb1c5451d40f1c42722f276a2fe2de19a38928d17e8a4efca0358", 0x2000, &(0x7f0000000880)={&(0x7f0000000040)={0x50, 0x0, 0xff, {0x7, 0x1f, 0x0, 0x800000, 0xcba, 0x9, 0xffff, 0x2}}, &(0x7f0000000100)={0x18, 0x0, 0x100000001, {0x6}}, &(0x7f0000000200)={0x18, 0x0, 0x1, {0x7}}, &(0x7f0000000240)={0x18, 0xffffffffffffffda, 0x8, {0xb4}}, &(0x7f0000000280)={0x18, 0xffffffffffffffda, 0x2, {0x9}}, &(0x7f00000002c0)={0x28, 0xfffffffffffffffe, 0x5, {{0x3f, 0x3, 0x0, r2}}}, &(0x7f0000000300)={0x60, 0x0, 0x1000, {{0x4, 0x100000000, 0x2, 0xca9, 0xff, 0x40, 0x7, 0x91}}}, &(0x7f0000000380)={0x18, 0x0, 0x1, {0x100}}, &(0x7f00000003c0)={0x11, 0xffffffffffffffda, 0x1f76, {'\x00'}}, &(0x7f0000000400)={0x20, 0x0, 0x5, {0x0, 0x1}}, &(0x7f0000000440)={0x78, 0x0, 0x8000, {0x2, 0xb89f77a, 0x0, {0x0, 0x3, 0x6, 0xe8, 0x3ff, 0x8, 0x4, 0x0, 0x5, 0xc000, 0x7, r4, r5, 0x6, 0x4}}}, &(0x7f00000004c0)={0x90, 0x0, 0x8, {0x5, 0x1, 0x9, 0x5, 0x7, 0x0, {0x0, 0x20, 0x4, 0x1000, 0xc23, 0x6, 0x800, 0xa32, 0x20, 0xc000, 0x2fc, 0xee00, 0xee00, 0x10001, 0x5}}}, &(0x7f0000000580)={0x138, 0x0, 0x3, [{0x6, 0x7, 0xa, 0x2, '/dev/fuse\x00'}, {0x6, 0xffffffffffffffe1, 0x5, 0x7, '^:{#.'}, {0x4, 0x5, 0x5, 0x3, 'fuse\x00'}, {0x3, 0x9, 0x2, 0x1, 'fd'}, {0x3, 0x0, 0x5, 0x10001, 'fuse\x00'}, {0x6, 0x9, 0xa, 0x2, '$(\\\r^]\xb1\'{*'}, {0x2, 0x1}, {0x4, 0x1ee6, 0x7, 0x3f, 'user_id'}, {0x2, 0x101, 0x2, 0x2efa, '\'*'}]}, &(0x7f00000006c0)=ANY=[@ANYBLOB="b000000000000000ffff00000000000002000000000000000200000000000000090000000000000090000000000000000000000064b7bd000000010000000000000006000000000000000100010000000000010000800000000001000000000000000800000000000000ff0000000800000005000000002000000000", @ANYRES32=r8, @ANYRES32, @ANYBLOB="ff03000004000000000000000500000000000000010001000000000002000000800000005e00000000000000"], &(0x7f0000000780)={0xa0, 0x0, 0x1, {{0x5, 0x0, 0x7, 0x3, 0x5, 0x8, {0x3, 0x7, 0x5, 0x97d6, 0x4, 0xff, 0x5, 0x80000000, 0x101, 0x2000, 0x200, 0xee00, 0xee00, 0x7, 0x16b}}, {0x0, 0x1}}}, &(0x7f0000000840)={0x20, 0x0, 0xffffffff, {0x8, 0x0, 0x8, 0x8000}}}) io_uring_enter(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000140)=""/159) 07:01:26 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x8000000, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="680000002800310f00"/20, @ANYRES32=r3, @ANYBLOB="00000000045eb6"], 0x68}}, 0x0) [ 219.697340][T18078] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 219.719613][T18078] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.2'. [ 219.732025][T18042] loop3: p2 < > p3 p4 < > [ 219.736470][T18042] loop3: partition table partially beyond EOD, truncated [ 219.774203][T18042] loop3: p2 start 25 is beyond EOD, truncated [ 219.780520][T18042] loop3: p3 start 4276224225 is beyond EOD, truncated [ 219.787893][T18042] loop3: p4 size 2 extends beyond EOD, truncated [ 219.818660][T18100] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 219.851942][T18092] loop5: p2 < > p3 p4 < > [ 219.858796][T18100] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.2'. 07:01:26 executing program 3: syz_read_part_table(0x402, 0x1, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff0a0000010000000000ffffff8500e931190000000000000680ffffff82000000e100e2fe87770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 07:01:26 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0, 0xffff00000000}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) 07:01:26 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0, 0xfe80ffff}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) 07:01:26 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = accept$netrom(0xffffffffffffffff, &(0x7f0000000ac0)={{0x3, @rose}, [@rose, @netrom, @default, @bcast, @bcast, @null, @remote, @null]}, &(0x7f0000000140)=0xfe52) lsetxattr$trusted_overlay_redirect(&(0x7f0000000900)='./file1\x00', &(0x7f0000000940)='trusted.overlay.redirect\x00', &(0x7f0000000980)='./file0\x00', 0x8, 0x4) r2 = signalfd(r1, &(0x7f0000000200)={[0xf9]}, 0x8) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB="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", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="c2f72d99b48aad59d092f6f052ab31a59dce2d1af6c5ca9b9225bcb541c374bd98737c3a20ad853b0c78cfdb8df7e51c13ae0b61f774849d677b272c55ab6d765e186524f4f8bf3c0bda51d436853544755b8181e3e0c6727f4e627ed79fa8ff1639ee0b114caaeea662f6af9a087f6d205b098291edf2504ed6e9e294dc250facc8fc460994f71067acd6abc2eab18ba3e0893ba4e8f3b93f465c7937c97ac29720919dcd74f66ce9eb884f34ea9d1585593659412b09758ec30f30b7853e"]) r3 = syz_mount_image$cifs(&(0x7f0000000540)='cifs\x00', &(0x7f0000000580)='./file0\x00', 0x2, 0x3, &(0x7f0000000800)=[{&(0x7f00000005c0)="42bba98bfece201af215185aa79a1d2ce3a2ca2046019128555e492d0e790ff654400d019e7e1fb035216b68f9d811d3148fe46ae8f971eb6ee572d63e840ce461f43db15a8117488df5601415e191327f959dc2a2400a0db38953e399b28033ad82346b4689eaf4911cbe00b33100443490856ac928d6d190ac30cea2fd1bca75ec7a98cf53a9263f1dfe7a39bfc13b0cfb91c9b6452f61de239eef723fbb44f4991e4c5198aaf29c1b39e91172f264a1686779c32241a4ebb1b4566debfe3ee4f60998c3753e670059b748a2fee334a6", 0xd1, 0x100000000}, {&(0x7f00000006c0)="76bb474d84918344a43565bf2253f0a5de94c21e54230cf06b793b9c2bcdbaebc4111eaac5eee048ea5a90699b8d4f99d2578ed45ba0113bffd7ec7a031449c22a6b14b86a63adb889159a0e78ecf122f03face22a946d84510a0db7c5198c6c905890d3a4269a3d2541b6a7bb5833b75eb0ad6469dbd35b45482f8a8a38aa05054372b5a7c1721913d78a1b934fb5", 0x8f, 0x10001}, {&(0x7f0000000780)="18feb03b1a746d18d18b7ef679833446661cd329835e7da6944da4441d997903bbe9e0464aad41e4cd0d4b60a0086f7322fcde76b7dfc7d67a8995cf55114e1ace30f425e3e867a7e06a373223379c0b35c99022be6bf65c6763cb19a35cabd72e20510027376ef170e0", 0x6a}], 0x0, &(0x7f0000000880)='/-\x00') faccessat2(r3, &(0x7f00000008c0)='./file0\x00', 0x1, 0x1000) r4 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$CHAR_RAW_PG(r4, 0x401870c8, 0x0) ioctl$CHAR_RAW_HDIO_GETGEO(r4, 0x301, &(0x7f0000000480)) r5 = syz_io_uring_setup(0x76d1, &(0x7f0000000040), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, &(0x7f00000004c0)={'NETMAP\x00'}, &(0x7f0000000500)=0x1e) r8 = signalfd(r1, &(0x7f0000000400)={[0x732d5ab]}, 0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r8, 0x84, 0x72, &(0x7f0000000440)={0x0, 0x8001, 0x10}, 0xc) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r8, 0x84, 0x72, &(0x7f0000000a00)={0x0, 0x8001, 0x30}, &(0x7f0000000a40)=0xc) setsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000a80)={r9, 0xfab}, 0x8) syz_io_uring_submit(r6, r7, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000000380), &(0x7f00000003c0)=0x4) io_uring_enter(r5, 0x1, 0x0, 0x0, 0x0, 0x0) 07:01:26 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x9000000, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="680000002800310f00"/20, @ANYRES32=r3, @ANYBLOB="00000000045eb6"], 0x68}}, 0x0) [ 219.859503][T18092] loop5: partition table partially beyond EOD, truncated [ 219.877602][T18092] loop5: p3 start 4276224225 is beyond EOD, truncated 07:01:26 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0, 0xfec0ffff}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) [ 219.949162][T18121] fuse: Unknown parameter 'rogtmode' [ 219.954133][T18120] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 219.978915][T18121] CIFS: Attempting to mount /dev/loop0 07:01:26 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0, 0x4000000000000}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) [ 219.990972][T18120] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.2'. [ 219.995805][T18121] CIFS: VFS: Malformed UNC in devname 07:01:26 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0xa000000, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="680000002800310f00"/20, @ANYRES32=r3, @ANYBLOB="00000000045eb6"], 0x68}}, 0x0) [ 220.046485][T18092] loop5: p2 < > p3 p4 < > [ 220.050979][T18092] loop5: partition table partially beyond EOD, truncated [ 220.069399][T18092] loop5: p3 start 4276224225 is beyond EOD, truncated [ 220.094009][T18121] fuse: Unknown parameter 'rogtmode' [ 220.103646][T18152] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 220.131753][T18133] loop3: p2 < > p3 p4 < > [ 220.131911][T18139] CIFS: Attempting to mount /dev/loop0 07:01:26 executing program 5: syz_read_part_table(0x40000800, 0x3, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff0a0000010000000000ffffff8500e931190000000000000680ffffff82000000e100e2fe87770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 07:01:26 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0, 0xff000000}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) 07:01:26 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0, 0x3665c4ffffffff}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) 07:01:26 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0xc000000, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="680000002800310f00"/20, @ANYRES32=r3, @ANYBLOB="00000000045eb6"], 0x68}}, 0x0) [ 220.136297][T18133] loop3: partition table partially beyond EOD, truncated [ 220.149570][ T5086] loop5: p2 < > p3 p4 < > [ 220.151681][T18133] loop3: p2 start 25 is beyond EOD, truncated [ 220.154409][ T5086] loop5: partition table partially beyond EOD, truncated [ 220.171461][T18139] CIFS: VFS: Malformed UNC in devname [ 220.174228][T18133] loop3: p3 start 4276224225 is beyond EOD, truncated [ 220.191744][ T5086] loop5: p3 start 4276224225 is beyond EOD, truncated [ 220.438436][T18133] loop3: p2 < > p3 p4 < > [ 220.443179][T18133] loop3: partition table partially beyond EOD, truncated [ 220.450543][T18133] loop3: p2 start 25 is beyond EOD, truncated [ 220.457892][T18133] loop3: p3 start 4276224225 is beyond EOD, truncated [ 220.481926][T18192] loop5: p2 < > p3 p4 < > 07:01:26 executing program 3: syz_read_part_table(0x406, 0x1, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff0a0000010000000000ffffff8500e931190000000000000680ffffff82000000e100e2fe87770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 07:01:26 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0, 0xffff0000}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) 07:01:26 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0, 0x0) 07:01:26 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0xf000000, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="680000002800310f00"/20, @ANYRES32=r3, @ANYBLOB="00000000045eb6"], 0x68}}, 0x0) 07:01:26 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) [ 220.486373][T18192] loop5: partition table partially beyond EOD, truncated [ 220.496054][T18192] loop5: p3 start 4276224225 is beyond EOD, truncated 07:01:27 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB="66d01e", @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r1 = syz_io_uring_setup(0x76d1, &(0x7f0000000040), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x31) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="4400000024001d0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f1ffffff000000000900010068667363000000001400028430cb7e3000"/44], 0x44}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=@delchain={0x34, 0x28, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0x4, 0xffff}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x98, 0x0, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x24}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000044) io_uring_enter(r1, 0x1, 0x0, 0x0, 0x0, 0x0) 07:01:27 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0, 0x400000000000000}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) 07:01:27 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0, 0xffff80fe}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) [ 220.640845][T18228] fuse: Unknown parameter 'fÐ0x0000000000000003' [ 220.658350][T18236] fuse: Unknown parameter 'fÐ0x0000000000000003' [ 220.691986][T18192] loop5: p2 < > p3 p4 < > [ 220.696442][T18192] loop5: partition table partially beyond EOD, truncated [ 220.719747][T18192] loop5: p3 start 4276224225 is beyond EOD, truncated 07:01:27 executing program 5: syz_read_part_table(0x40000800, 0x4, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff0a0000010000000000ffffff8500e931190000000000000680ffffff82000000e100e2fe87770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 07:01:27 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x10000000, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="680000002800310f00"/20, @ANYRES32=r3, @ANYBLOB="00000000045eb6"], 0x68}}, 0x0) 07:01:27 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0, 0x1000000000000000}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) 07:01:27 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0, 0xffffc0fe}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) [ 220.761012][T18244] loop3: p2 < > p3 p4 < > [ 220.772198][ T5086] loop5: p2 < > p3 p4 < > [ 220.776619][ T5086] loop5: partition table partially beyond EOD, truncated [ 220.776899][T18244] loop3: partition table partially beyond EOD, truncated [ 220.793535][ T5086] loop5: p3 start 4276224225 is beyond EOD, truncated [ 220.808801][T18244] loop3: p2 start 25 is beyond EOD, truncated [ 220.838279][T18244] loop3: p3 start 4276224225 is beyond EOD, truncated [ 220.892674][T18269] loop5: p2 < > p3 p4 < > [ 220.897170][T18269] loop5: partition table partially beyond EOD, truncated [ 220.907513][T18269] loop5: p3 start 4276224225 is beyond EOD, truncated [ 220.945402][ T5086] loop5: p2 < > p3 p4 < > [ 220.949922][ T5086] loop5: partition table partially beyond EOD, truncated [ 220.957752][ T5086] loop5: p3 start 4276224225 is beyond EOD, truncated [ 220.991691][T18244] loop3: p2 < > p3 p4 < > [ 220.996435][T18244] loop3: partition table partially beyond EOD, truncated [ 221.003983][T18244] loop3: p2 start 25 is beyond EOD, truncated [ 221.010108][T18244] loop3: p3 start 4276224225 is beyond EOD, truncated 07:01:27 executing program 3: syz_read_part_table(0x500, 0x1, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff0a0000010000000000ffffff8500e931190000000000000680ffffff82000000e100e2fe87770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 07:01:27 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, 0x0, r2) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000480)={{{@in=@multicast2, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@remote}}, &(0x7f0000000280)=0xe8) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x1080002, &(0x7f00000003c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id', 0x3d, r3}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@blksize={'blksize'}}]}}) r4 = syz_io_uring_setup(0x76d1, &(0x7f0000000040), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) r7 = fsmount(0xffffffffffffffff, 0x1, 0x71) read$FUSE(r0, &(0x7f00000020c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r7, &(0x7f0000000140)={0x50, 0xfffffffffffffff5, r8, {0x7, 0x1f, 0x7, 0xa90080, 0x9d0, 0x1000, 0xfffffffe}}, 0x50) io_uring_enter(r4, 0x1, 0x0, 0x0, 0x0, 0x0) 07:01:27 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0, 0x1c00000000000000}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) 07:01:27 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0, 0xffffff7f}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) 07:01:27 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x44000000, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="680000002800310f00"/20, @ANYRES32=r3, @ANYBLOB="00000000045eb6"], 0x68}}, 0x0) 07:01:27 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0, 0xffffffe0}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) 07:01:27 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0, 0x8000000000000000}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) [ 221.092410][ T5086] loop5: p2 < > p3 p4 < > [ 221.096938][ T5086] loop5: partition table partially beyond EOD, truncated [ 221.113471][ T5086] loop5: p3 start 4276224225 is beyond EOD, truncated [ 221.135336][T18269] loop5: p2 < > p3 p4 < > 07:01:27 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x60000000, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="680000002800310f00"/20, @ANYRES32=r3, @ANYBLOB="00000000045eb6"], 0x68}}, 0x0) [ 221.139790][T18269] loop5: partition table partially beyond EOD, truncated [ 221.148698][T18269] loop5: p3 start 4276224225 is beyond EOD, truncated 07:01:27 executing program 5: syz_read_part_table(0x40000800, 0x5, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff0a0000010000000000ffffff8500e931190000000000000680ffffff82000000e100e2fe87770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 07:01:27 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x65580000, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="680000002800310f00"/20, @ANYRES32=r3, @ANYBLOB="00000000045eb6"], 0x68}}, 0x0) 07:01:27 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001140)='/dev/vcsa\x00', 0x600040, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000001180)=[@in6={0xa, 0x4e20, 0xfffff801, @mcast2, 0x3}, @in6={0xa, 0x4e20, 0x7ff, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x62f}, @in6={0xa, 0x4e21, 0x8001, @private1={0xfc, 0x1, [], 0x1}, 0x2e}, @in6={0xa, 0x4e21, 0x0, @private2, 0x19}, @in6={0xa, 0x4e20, 0x80000000, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x5ce}, @in={0x2, 0x4e24, @empty}, @in={0x2, 0x4e20, @local}, @in6={0xa, 0x4e22, 0x800, @local, 0x2}, @in6={0xa, 0x4e22, 0x8001, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x3}, @in6={0xa, 0x4e23, 0x3ff, @remote, 0x5}], 0x100) syslog(0x1, &(0x7f0000000140)=""/4096, 0x1000) r2 = dup(r0) r3 = syz_io_uring_setup(0x5ad0, &(0x7f0000000040)={0x0, 0x7c17, 0x8, 0x3, 0xffffbffd, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) r6 = openat$cgroup_ro(r1, &(0x7f0000001280)='cgroup.events\x00', 0x0, 0x0) ioctl$VIDIOC_G_FBUF(r6, 0x8030560a, &(0x7f00000013c0)={0x28, 0x5, &(0x7f00000012c0)="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", {0x6, 0x7fffffff, 0x31364d4e, 0x9, 0x0, 0x1, 0x2, 0xfffffffb}}) io_uring_enter(r3, 0x1, 0x0, 0x0, 0x0, 0x0) 07:01:27 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0, 0xa818010000000000}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) [ 221.277229][T18343] loop3: p2 < > p3 p4 < > [ 221.281741][T18343] loop3: partition table partially beyond EOD, truncated [ 221.309903][T18343] loop3: p2 start 25 is beyond EOD, truncated [ 221.333478][T18343] loop3: p3 start 4276224225 is beyond EOD, truncated [ 221.378237][T18364] loop5: p2 < > p3 p4 < > [ 221.382767][T18364] loop5: partition table partially beyond EOD, truncated [ 221.390315][T18364] loop5: p3 start 4276224225 is beyond EOD, truncated [ 221.400806][ T5086] loop5: p2 < > p3 p4 < > [ 221.405305][ T5086] loop5: partition table partially beyond EOD, truncated [ 221.415245][ T5086] loop5: p3 start 4276224225 is beyond EOD, truncated [ 221.453181][T18343] loop3: p2 < > p3 p4 < > [ 221.457654][T18343] loop3: partition table partially beyond EOD, truncated [ 221.465487][T18343] loop3: p2 start 25 is beyond EOD, truncated [ 221.473413][T18343] loop3: p3 start 4276224225 is beyond EOD, truncated 07:01:28 executing program 3: syz_read_part_table(0x600, 0x1, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff0a0000010000000000ffffff8500e931190000000000000680ffffff82000000e100e2fe87770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 07:01:28 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0, 0xffff00000000}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) 07:01:28 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x81000000, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="680000002800310f00"/20, @ANYRES32=r3, @ANYBLOB="00000000045eb6"], 0x68}}, 0x0) 07:01:28 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0, 0xe0ffffff00000000}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) 07:01:28 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB]) r1 = syz_io_uring_setup(0x76d1, &(0x7f0000000040), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000040)={r5}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140)={r5, 0xfffffffb}, 0x8) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0, 0x0, {0x100}}, 0x0) io_uring_enter(r1, 0x1, 0x0, 0x0, 0x0, 0x0) [ 221.592579][T18364] loop5: p2 < > p3 p4 < > [ 221.598162][T18364] loop5: partition table partially beyond EOD, truncated 07:01:28 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0, 0xf4fe000000000000}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) 07:01:28 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0, 0x4000000000000}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) 07:01:28 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x81ffffff, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="680000002800310f00"/20, @ANYRES32=r3, @ANYBLOB="00000000045eb6"], 0x68}}, 0x0) [ 221.638143][T18364] loop5: p3 start 4276224225 is beyond EOD, truncated 07:01:28 executing program 5: syz_read_part_table(0x40000800, 0x6, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff0a0000010000000000ffffff8500e931190000000000000680ffffff82000000e100e2fe87770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 07:01:28 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0, 0xfc00000000000000}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) 07:01:28 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0, 0x3665c4ffffffff}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) [ 221.723172][T18408] loop3: p2 < > p3 p4 < > [ 221.727674][T18408] loop3: partition table partially beyond EOD, truncated [ 221.736618][ T5086] loop5: p2 < > p3 p4 < > [ 221.741086][ T5086] loop5: partition table partially beyond EOD, truncated [ 221.746057][T18408] loop3: p2 start 25 is beyond EOD, truncated [ 221.758979][T18408] loop3: p3 start 4276224225 is beyond EOD, truncated [ 221.760346][ T5086] loop5: p3 start 4276224225 is beyond EOD, truncated 07:01:28 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0, 0xfe80ffff00000000}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) [ 221.892388][T18408] loop3: p2 < > p3 p4 < > [ 221.896883][T18408] loop3: partition table partially beyond EOD, truncated [ 221.908524][T18408] loop3: p2 start 25 is beyond EOD, truncated [ 221.915943][T18408] loop3: p3 start 4276224225 is beyond EOD, truncated 07:01:28 executing program 3: syz_read_part_table(0x604, 0x1, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff0a0000010000000000ffffff8500e931190000000000000680ffffff82000000e100e2fe87770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 07:01:28 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x8699decf, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="680000002800310f00"/20, @ANYRES32=r3, @ANYBLOB="00000000045eb6"], 0x68}}, 0x0) 07:01:28 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0, 0x100000000000000}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) 07:01:28 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0, 0xfec0ffff00000000}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) [ 221.942078][T18452] loop5: p2 < > p3 p4 < > [ 221.946516][T18452] loop5: partition table partially beyond EOD, truncated [ 221.955559][T18452] loop5: p3 start 4276224225 is beyond EOD, truncated [ 222.096125][T18452] loop5: p2 < > p3 p4 < > [ 222.100579][T18452] loop5: partition table partially beyond EOD, truncated [ 222.109921][T18452] loop5: p3 start 4276224225 is beyond EOD, truncated [ 222.141569][T18488] loop3: p2 < > p3 p4 < > [ 222.146045][T18488] loop3: partition table partially beyond EOD, truncated [ 222.153741][T18488] loop3: p2 start 25 is beyond EOD, truncated [ 222.159796][T18488] loop3: p3 start 4276224225 is beyond EOD, truncated [ 222.214886][ T5086] loop5: p2 < > p3 p4 < > [ 222.219346][ T5086] loop5: partition table partially beyond EOD, truncated [ 222.227257][ T5086] loop5: p3 start 4276224225 is beyond EOD, truncated [ 222.242636][T18488] loop3: p2 < > p3 p4 < > [ 222.247042][T18488] loop3: partition table partially beyond EOD, truncated [ 222.254965][T18488] loop3: p2 start 25 is beyond EOD, truncated [ 222.261060][T18488] loop3: p3 start 4276224225 is beyond EOD, truncated 07:01:28 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="6664090ff3482a47fcb23d", @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r1 = syz_io_uring_setup(0x76d1, &(0x7f0000000040), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x1, 0x0, 0x0, 0x0, 0x0) 07:01:28 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x88470000, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="680000002800310f00"/20, @ANYRES32=r3, @ANYBLOB="00000000045eb6"], 0x68}}, 0x0) 07:01:28 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0, 0xff00000000000000}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) 07:01:28 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0, 0x400000000000000}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) 07:01:28 executing program 5: syz_read_part_table(0x40000800, 0x8, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff0a0000010000000000ffffff8500e931190000000000000680ffffff82000000e100e2fe87770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 07:01:28 executing program 3: syz_read_part_table(0x700, 0x1, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff0a0000010000000000ffffff8500e931190000000000000680ffffff82000000e100e2fe87770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 07:01:28 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x88480000, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="680000002800310f00"/20, @ANYRES32=r3, @ANYBLOB="00000000045eb6"], 0x68}}, 0x0) 07:01:28 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0, 0xffffff7f00000000}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) [ 222.490027][T18530] fuse: Unknown parameter 'fd óH*Gü²' [ 222.496154][T18526] loop3: p2 < > p3 p4 < > [ 222.500657][T18526] loop3: partition table partially beyond EOD, truncated [ 222.515265][T18526] loop3: p2 start 25 is beyond EOD, truncated [ 222.523974][T18541] fuse: Unknown parameter 'fd óH*Gü²' 07:01:29 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0, 0x1000000000000000}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) 07:01:29 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = syz_io_uring_setup(0x76d1, &(0x7f0000000040), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000041c0)='/dev/fuse\x00', 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040)='fuse\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r6}, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r4, 0x114, &(0x7f0000000180)=0x1, 0x0, 0x4) io_uring_enter(r1, 0x1, 0x0, 0x0, 0x0, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448dc, &(0x7f0000000140)="65790594d4e98a0788e8c0ef15c377c1a6b4305c103d79d3908f1314519878fe6412a361673519c69499f7383eb4d62c6fd8d7") [ 222.534911][T18526] loop3: p3 start 4276224225 is beyond EOD, truncated [ 222.546274][ T5086] loop5: p2 < > p3 p4 < > [ 222.550755][ T5086] loop5: partition table partially beyond EOD, truncated 07:01:29 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0, 0x1c00000000000000}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) 07:01:29 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x88a8ffff, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="680000002800310f00"/20, @ANYRES32=r3, @ANYBLOB="00000000045eb6"], 0x68}}, 0x0) [ 222.583719][ T5086] loop5: p3 start 4276224225 is beyond EOD, truncated [ 222.608217][T18522] loop5: p2 < > p3 p4 < > [ 222.618301][T18522] loop5: partition table partially beyond EOD, truncated 07:01:29 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0, 0x8000000000000000}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) 07:01:29 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0, 0xffffffff00000000}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) [ 222.639318][T18522] loop5: p3 start 4276224225 is beyond EOD, truncated 07:01:29 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0, 0xa818010000000000}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) [ 222.683557][T18526] loop3: p2 < > p3 p4 < > [ 222.688035][T18526] loop3: partition table partially beyond EOD, truncated [ 222.697474][T18526] loop3: p2 start 25 is beyond EOD, truncated [ 222.705671][T18526] loop3: p3 start 4276224225 is beyond EOD, truncated 07:01:29 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0xcfde9986, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="680000002800310f00"/20, @ANYRES32=r3, @ANYBLOB="00000000045eb6"], 0x68}}, 0x0) [ 222.801719][T18522] loop5: p2 < > p3 p4 < > [ 222.806281][T18522] loop5: partition table partially beyond EOD, truncated [ 222.822285][T18522] loop5: p3 start 4276224225 is beyond EOD, truncated 07:01:29 executing program 5: syz_read_part_table(0x40000800, 0xa, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff0a0000010000000000ffffff8500e931190000000000000680ffffff82000000e100e2fe87770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 07:01:29 executing program 3: syz_read_part_table(0x900, 0x1, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff0a0000010000000000ffffff8500e931190000000000000680ffffff82000000e100e2fe87770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 07:01:29 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0, 0xffffffffc4653600}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) 07:01:29 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0, 0xe0ffffff00000000}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) 07:01:29 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0xfb010000, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="680000002800310f00"/20, @ANYRES32=r3, @ANYBLOB="00000000045eb6"], 0x68}}, 0x0) [ 222.897768][ T5086] loop5: p2 < > p3 p4 < > [ 222.903811][ T5086] loop5: partition table partially beyond EOD, truncated [ 222.911980][ T5086] loop5: p3 start 4276224225 is beyond EOD, truncated [ 223.001698][T18624] loop3: p2 < > p3 p4 < > [ 223.006200][T18624] loop3: partition table partially beyond EOD, truncated [ 223.015953][T18624] loop3: p2 start 25 is beyond EOD, truncated [ 223.022499][T18624] loop3: p3 start 4276224225 is beyond EOD, truncated [ 223.121757][T18624] loop3: p2 < > p3 p4 < > [ 223.126440][T18624] loop3: partition table partially beyond EOD, truncated [ 223.135785][T18624] loop3: p2 start 25 is beyond EOD, truncated [ 223.142177][T18624] loop3: p3 start 4276224225 is beyond EOD, truncated [ 223.171710][T18649] loop5: p2 < > p3 p4 < > [ 223.176168][T18649] loop5: partition table partially beyond EOD, truncated [ 223.184142][T18649] loop5: p3 start 4276224225 is beyond EOD, truncated 07:01:29 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = syz_io_uring_setup(0x76ce, &(0x7f00000001c0)={0x0, 0x2, 0x4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) r4 = open(&(0x7f0000000180)='./file1\x00', 0x1, 0x10) ioctl$HIDIOCSREPORT(r4, 0x400c4808, &(0x7f0000000240)={0x2, 0x3, 0xfffffffa}) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x40, 0x0) ioctl$SIOCAX25GETINFO(r5, 0x89ed, &(0x7f0000000100)) io_uring_enter(r1, 0x1, 0x0, 0x0, 0x0, 0x0) 07:01:29 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0, 0xf4fe000000000000}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) 07:01:29 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) 07:01:29 executing program 3: syz_read_part_table(0xa00, 0x1, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff0a0000010000000000ffffff8500e931190000000000000680ffffff82000000e100e2fe87770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 07:01:29 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0xffffa888, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="680000002800310f00"/20, @ANYRES32=r3, @ANYBLOB="00000000045eb6"], 0x68}}, 0x0) 07:01:29 executing program 5: syz_read_part_table(0x40000800, 0xf, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff0a0000010000000000ffffff8500e931190000000000000680ffffff82000000e100e2fe87770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) [ 223.403054][T18649] loop5: p2 < > p3 p4 < > [ 223.407489][T18649] loop5: partition table partially beyond EOD, truncated [ 223.415628][T18649] loop5: p3 start 4276224225 is beyond EOD, truncated [ 223.425565][ T5086] loop5: p2 < > p3 p4 < > [ 223.430045][ T5086] loop5: partition table partially beyond EOD, truncated [ 223.445363][ T5086] loop5: p3 start 4276224225 is beyond EOD, truncated 07:01:29 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0xffffff7f, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="680000002800310f00"/20, @ANYRES32=r3, @ANYBLOB="00000000045eb6"], 0x68}}, 0x0) 07:01:30 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) 07:01:30 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0, 0xfc00000000000000}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) 07:01:30 executing program 0: syz_read_part_table(0x40000800, 0xa, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff0a0000010000000000ffffff8500e931190000000000000680ffffff82000000e100e2fe87770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) [ 223.571917][T18701] loop3: p2 < > p3 p4 < > [ 223.576388][T18701] loop3: partition table partially beyond EOD, truncated 07:01:30 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0xffffff81, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="680000002800310f00"/20, @ANYRES32=r3, @ANYBLOB="00000000045eb6"], 0x68}}, 0x0) 07:01:30 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0, 0xfe80ffff00000000}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) [ 223.616455][T18701] loop3: p2 start 25 is beyond EOD, truncated [ 223.637331][T18704] loop5: p2 < > p3 p4 < > [ 223.649957][T18704] loop5: partition table partially beyond EOD, truncated [ 223.658095][T18704] loop5: p3 start 4276224225 is beyond EOD, truncated 07:01:30 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1c}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) 07:01:30 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="100000002800310f00"/20, @ANYRES32=r3, @ANYBLOB="00000000045eb6"], 0x68}}, 0x0) [ 223.665408][T18701] loop3: p3 start 4276224225 is beyond EOD, truncated [ 223.701772][T18730] loop0: p2 < > p3 p4 < > [ 223.706271][T18730] loop0: partition table partially beyond EOD, truncated 07:01:30 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0, 0xfec0ffff00000000}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) [ 223.720574][T18730] loop0: p3 start 4276224225 is beyond EOD, truncated 07:01:30 executing program 3: syz_read_part_table(0xb00, 0x1, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff0a0000010000000000ffffff8500e931190000000000000680ffffff82000000e100e2fe87770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 07:01:30 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfc}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) [ 223.882620][T18704] loop5: p2 < > p3 p4 < > [ 223.887067][T18704] loop5: partition table partially beyond EOD, truncated [ 223.895125][T18704] loop5: p3 start 4276224225 is beyond EOD, truncated 07:01:30 executing program 5: syz_read_part_table(0x40000800, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff0a0000010000000000ffffff8500e931190000000000000680ffffff82000000e100e2fe87770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 07:01:30 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="240000002800310f00"/20, @ANYRES32=r3, @ANYBLOB="00000000045eb6"], 0x68}}, 0x0) 07:01:30 executing program 0: syz_read_part_table(0x40000800, 0x8, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff0a0000010000000000ffffff8500e931190000000000000680ffffff82000000e100e2fe87770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 07:01:30 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0, 0xff00000000000000}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) 07:01:30 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1c00}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) 07:01:30 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="c00000002800310f00"/20, @ANYRES32=r3, @ANYBLOB="00000000045eb6"], 0x68}}, 0x0) 07:01:30 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0, 0xffffff7f00000000}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) 07:01:30 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xf4fe}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) [ 224.014283][ T5086] loop5: p2 < > p3 p4 < > [ 224.018792][ T5086] loop5: partition table partially beyond EOD, truncated [ 224.042887][ T5086] loop5: p3 start 4276224225 is beyond EOD, truncated [ 224.083498][T18787] loop0: p2 < > p3 p4 < > [ 224.087954][T18787] loop0: partition table partially beyond EOD, truncated [ 224.096570][T18787] loop0: p3 start 4276224225 is beyond EOD, truncated [ 224.121412][T18804] loop3: p2 < > p3 p4 < > [ 224.125967][T18804] loop3: partition table partially beyond EOD, truncated 07:01:30 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0, 0xffffffff00000000}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) 07:01:30 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="c00e00002800310f00"/20, @ANYRES32=r3, @ANYBLOB="00000000045eb6"], 0x68}}, 0x0) [ 224.139680][T18804] loop3: p2 start 25 is beyond EOD, truncated [ 224.148488][T18804] loop3: p3 start 4276224225 is beyond EOD, truncated [ 224.291642][T18824] loop5: p2 < > p3 p4 < > [ 224.296131][T18824] loop5: partition table partially beyond EOD, truncated [ 224.305779][T18824] loop5: p3 start 4276224225 is beyond EOD, truncated [ 224.331609][T18804] loop3: p2 < > p3 p4 < > [ 224.336063][T18804] loop3: partition table partially beyond EOD, truncated [ 224.343972][T18804] loop3: p2 start 25 is beyond EOD, truncated [ 224.350073][T18804] loop3: p3 start 4276224225 is beyond EOD, truncated 07:01:30 executing program 3: syz_read_part_table(0xc00, 0x1, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff0a0000010000000000ffffff8500e931190000000000000680ffffff82000000e100e2fe87770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 07:01:30 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfc00}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) 07:01:30 executing program 5: syz_read_part_table(0x40000800, 0x12, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff0a0000010000000000ffffff8500e931190000000000000680ffffff82000000e100e2fe87770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 07:01:30 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0, 0xffffffffc4653600}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) 07:01:30 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="e03f03002800310f00"/20, @ANYRES32=r3, @ANYBLOB="00000000045eb6"], 0x68}}, 0x0) 07:01:30 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB]) r1 = syz_io_uring_setup(0x76d1, &(0x7f0000000040), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000040)={r5}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140)={r5, 0xfffffffb}, 0x8) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0, 0x0, {0x100}}, 0x0) io_uring_enter(r1, 0x1, 0x0, 0x0, 0x0, 0x0) 07:01:30 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfef4}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) [ 224.454961][T18824] loop5: p2 < > p3 p4 < > [ 224.459373][T18824] loop5: partition table partially beyond EOD, truncated [ 224.467507][T18824] loop5: p3 start 4276224225 is beyond EOD, truncated [ 224.492513][ T5086] loop5: p2 < > p3 p4 < > [ 224.497036][ T5086] loop5: partition table partially beyond EOD, truncated [ 224.523593][T18870] loop3: p2 < > p3 p4 < > [ 224.525280][ T5086] loop5: p3 start 4276224225 is beyond EOD, truncated [ 224.528131][T18870] loop3: partition table partially beyond EOD, truncated [ 224.549404][T18870] loop3: p2 start 25 is beyond EOD, truncated [ 224.555747][T18870] loop3: p3 start 4276224225 is beyond EOD, truncated 07:01:31 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xff00}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) 07:01:31 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="681500202800310f00"/20, @ANYRES32=r3, @ANYBLOB="00000000045eb6"], 0x68}}, 0x0) 07:01:31 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) [ 224.568831][T18881] __nla_validate_parse: 44 callbacks suppressed [ 224.568838][T18881] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 07:01:31 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x118a8}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) [ 224.732784][T18911] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 224.738749][T18870] loop3: p2 < > p3 p4 < > [ 224.747784][T18870] loop3: partition table partially beyond EOD, truncated 07:01:31 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) [ 224.775270][T18870] loop3: p2 start 25 is beyond EOD, truncated [ 224.793446][T18870] loop3: p3 start 4276224225 is beyond EOD, truncated [ 224.801786][T18913] loop5: p2 < > p3 p4 < > [ 224.806239][T18913] loop5: partition table partially beyond EOD, truncated [ 224.821444][T18913] loop5: p3 start 4276224225 is beyond EOD, truncated 07:01:31 executing program 3: syz_read_part_table(0xd00, 0x1, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff0a0000010000000000ffffff8500e931190000000000000680ffffff82000000e100e2fe87770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 07:01:31 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) [ 224.963275][T18913] loop5: p2 < > p3 p4 < > [ 224.967706][T18913] loop5: partition table partially beyond EOD, truncated [ 224.988117][T18913] loop5: p3 start 4276224225 is beyond EOD, truncated 07:01:31 executing program 5: syz_read_part_table(0x40000800, 0x14, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff0a0000010000000000ffffff8500e931190000000000000680ffffff82000000e100e2fe87770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 07:01:31 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="00f0ff7f2800310f00"/20, @ANYRES32=r3, @ANYBLOB="00000000045eb6"], 0x68}}, 0x0) 07:01:31 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1c}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) [ 225.021489][T18941] loop3: p2 < > p3 p4 < > [ 225.025888][T18941] loop3: partition table partially beyond EOD, truncated [ 225.033456][T18941] loop3: p2 start 25 is beyond EOD, truncated [ 225.040296][T18941] loop3: p3 start 4276224225 is beyond EOD, truncated [ 225.078420][T18953] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 225.097488][ T5086] loop5: p2 < > p3 p4 < > [ 225.102186][ T5086] loop5: partition table partially beyond EOD, truncated [ 225.110142][ T5086] loop5: p3 start 4276224225 is beyond EOD, truncated [ 225.124644][T18941] loop3: p2 < > p3 p4 < > [ 225.129167][T18941] loop3: partition table partially beyond EOD, truncated [ 225.136639][T18941] loop3: p2 start 25 is beyond EOD, truncated [ 225.143261][T18941] loop3: p3 start 4276224225 is beyond EOD, truncated [ 225.241852][T18969] loop5: p2 < > p3 p4 < > [ 225.246322][T18969] loop5: partition table partially beyond EOD, truncated [ 225.255451][T18969] loop5: p3 start 4276224225 is beyond EOD, truncated [ 225.264190][ T5086] loop5: p2 < > p3 p4 < > [ 225.268693][ T5086] loop5: partition table partially beyond EOD, truncated [ 225.276896][ T5086] loop5: p3 start 4276224225 is beyond EOD, truncated 07:01:31 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB]) r1 = syz_io_uring_setup(0x76d1, &(0x7f0000000040), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000040)={r5}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140)={r5, 0xfffffffb}, 0x8) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0, 0x0, {0x100}}, 0x0) io_uring_enter(r1, 0x1, 0x0, 0x0, 0x0, 0x0) 07:01:31 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x3665c4}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) 07:01:31 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfc}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) 07:01:31 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="effdffff2800310f00"/20, @ANYRES32=r3, @ANYBLOB="00000000045eb6"], 0x68}}, 0x0) 07:01:31 executing program 3: syz_read_part_table(0xe00, 0x1, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff0a0000010000000000ffffff8500e931190000000000000680ffffff82000000e100e2fe87770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 07:01:31 executing program 5: syz_read_part_table(0x40000800, 0x1d, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff0a0000010000000000ffffff8500e931190000000000000680ffffff82000000e100e2fe87770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) [ 225.364501][T18969] loop5: p2 < > p3 p4 < > [ 225.368941][T18969] loop5: partition table partially beyond EOD, truncated [ 225.383565][T18969] loop5: p3 start 4276224225 is beyond EOD, truncated [ 225.397796][T18999] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 07:01:31 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="680000001000310f00"/20, @ANYRES32=r3, @ANYBLOB="00000000045eb6"], 0x68}}, 0x0) 07:01:31 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1c00}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) 07:01:31 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) [ 225.475406][T18997] loop3: p2 < > p3 p4 < > [ 225.479985][T18997] loop3: partition table partially beyond EOD, truncated [ 225.487950][T18997] loop3: p2 start 25 is beyond EOD, truncated [ 225.494374][T18997] loop3: p3 start 4276224225 is beyond EOD, truncated 07:01:32 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) [ 225.546243][T19030] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 07:01:32 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xf4fe}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) 07:01:32 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="680200002800310f00"/20, @ANYRES32=r3, @ANYBLOB="00000000045eb6"], 0x68}}, 0x0) [ 225.591233][T19030] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.2'. [ 225.622936][T18997] loop3: p2 < > p3 p4 < > [ 225.627440][T18997] loop3: partition table partially beyond EOD, truncated [ 225.636433][T18997] loop3: p2 start 25 is beyond EOD, truncated [ 225.646367][T18997] loop3: p3 start 4276224225 is beyond EOD, truncated [ 225.677842][T19041] loop5: p2 < > p3 p4 < > [ 225.683679][T19041] loop5: partition table partially beyond EOD, truncated [ 225.697488][T19041] loop5: p3 start 4276224225 is beyond EOD, truncated [ 225.702184][T19053] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 07:01:32 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB]) r1 = syz_io_uring_setup(0x76d1, &(0x7f0000000040), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000040)={r5}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140)={r5, 0xfffffffb}, 0x8) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0, 0x0, {0x100}}, 0x0) io_uring_enter(r1, 0x1, 0x0, 0x0, 0x0, 0x0) 07:01:32 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) 07:01:32 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfc00}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) 07:01:32 executing program 3: syz_read_part_table(0xf00, 0x1, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff0a0000010000000000ffffff8500e931190000000000000680ffffff82000000e100e2fe87770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 07:01:32 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="680400002800310f00"/20, @ANYRES32=r3, @ANYBLOB="00000000045eb6"], 0x68}}, 0x0) 07:01:32 executing program 5: syz_read_part_table(0x40000800, 0x25, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff0a0000010000000000ffffff8500e931190000000000000680ffffff82000000e100e2fe87770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 07:01:32 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="680500002800310f00"/20, @ANYRES32=r3, @ANYBLOB="00000000045eb6"], 0x68}}, 0x0) 07:01:32 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfef4}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) [ 226.288033][T19089] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 07:01:32 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1c000000}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) [ 226.352053][T19090] loop3: p2 < > p3 p4 < > [ 226.356538][T19090] loop3: partition table partially beyond EOD, truncated [ 226.361919][T19110] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 07:01:32 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="680600002800310f00"/20, @ANYRES32=r3, @ANYBLOB="00000000045eb6"], 0x68}}, 0x0) [ 226.393181][T19090] loop3: p2 start 25 is beyond EOD, truncated [ 226.412656][T19100] loop5: p2 < > p3 p4 < > [ 226.417248][T19100] loop5: partition table partially beyond EOD, truncated [ 226.424196][T19090] loop3: p3 start 4276224225 is beyond EOD, truncated [ 226.435209][T19100] loop5: p3 start 4276224225 is beyond EOD, truncated 07:01:32 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xff00}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) 07:01:32 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xa8180100}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) [ 226.450247][T19129] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 226.582606][T19090] loop3: p2 < > p3 p4 < > [ 226.587033][T19090] loop3: partition table partially beyond EOD, truncated [ 226.594936][T19090] loop3: p2 start 25 is beyond EOD, truncated [ 226.601831][T19100] loop5: p2 < > p3 p4 < > [ 226.606358][T19100] loop5: partition table partially beyond EOD, truncated [ 226.615361][T19090] loop3: p3 start 4276224225 is beyond EOD, truncated [ 226.624342][T19100] loop5: p3 start 4276224225 is beyond EOD, truncated 07:01:33 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB]) r1 = syz_io_uring_setup(0x76d1, &(0x7f0000000040), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000040)={r3}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140)={r3, 0xfffffffb}, 0x8) io_uring_enter(r1, 0x1, 0x0, 0x0, 0x0, 0x0) 07:01:33 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="680800002800310f00"/20, @ANYRES32=r3, @ANYBLOB="00000000045eb6"], 0x68}}, 0x0) 07:01:33 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x118a8}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) 07:01:33 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xc4653600}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) 07:01:33 executing program 3: syz_read_part_table(0x1100, 0x1, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff0a0000010000000000ffffff8500e931190000000000000680ffffff82000000e100e2fe87770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 07:01:33 executing program 5: syz_read_part_table(0x40000800, 0x2c, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff0a0000010000000000ffffff8500e931190000000000000680ffffff82000000e100e2fe87770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 07:01:33 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xe0ffffff}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) 07:01:33 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="680900002800310f00"/20, @ANYRES32=r3, @ANYBLOB="00000000045eb6"], 0x68}}, 0x0) 07:01:33 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) [ 227.191868][T19183] loop3: p2 < > p3 p4 < > [ 227.197583][T19183] loop3: partition table partially beyond EOD, truncated [ 227.217450][T19183] loop3: p2 start 25 is beyond EOD, truncated [ 227.223760][T19183] loop3: p3 start 4276224225 is beyond EOD, truncated [ 227.262154][ T5086] loop5: p2 < > p3 p4 < > [ 227.266694][ T5086] loop5: partition table partially beyond EOD, truncated [ 227.280611][ T5086] loop5: p3 start 4276224225 is beyond EOD, truncated [ 227.295749][T19181] loop5: p2 < > p3 p4 < > 07:01:33 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xf4fe0000}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) [ 227.309755][T19181] loop5: partition table partially beyond EOD, truncated 07:01:33 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x3665c4}}, {{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast2}}, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/142}, {&(0x7f0000000180)=""/145}, {&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/126}, {&(0x7f0000000400)=""/130}, {&(0x7f00000004c0)=""/149}], 0x0, &(0x7f0000000240)=""/16}}], 0x30, 0x0, 0x0) 07:01:33 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="680a00002800310f00"/20, @ANYRES32=r3, @ANYBLOB="00000000045eb6"], 0x68}}, 0x0) [ 227.333632][T19181] loop5: p3 start 4276224225 is beyond EOD, truncated [ 227.361593][T19183] loop3: p2 < > p3 p4 < > [ 227.371500][T19183] loop3: partition table partially beyond EOD, truncated [ 227.378707][T19183] loop3: p2 start 25 is beyond EOD, truncated [ 227.385850][T19183] loop3: p3 start 4276224225 is beyond EOD, truncated [ 227.553544][ T5086] loop5: p2 < > p3 p4 < > [ 227.558053][ T5086] loop5: partition table partially beyond EOD, truncated [ 227.566632][ T5086] loop5: p3 start 4276224225 is beyond EOD, truncated [ 227.575746][T19181] loop5: p2 < > p3 p4 < > [ 227.580146][T19181] loop5: partition table partially beyond EOD, truncated [ 227.588339][T19181] loop5: p3 start 4276224225 is beyond EOD, truncated [ 227.595939][T19181] ================================================================== [ 227.604004][T19181] BUG: KCSAN: data-race in delete_from_page_cache_batch / page_mapping [ 227.612204][T19181] [ 227.614509][T19181] write to 0xffffea00023b9758 of 8 bytes by task 5086 on cpu 0: [ 227.622111][T19181] delete_from_page_cache_batch+0x39f/0x850 [ 227.628004][T19181] truncate_inode_pages_range+0x482/0xf70 [ 227.633692][T19181] truncate_inode_pages+0x20/0x30 [ 227.638687][T19181] __blkdev_put+0x205/0x4a0 [ 227.643156][T19181] blkdev_put+0x1e6/0x210 [ 227.647451][T19181] blkdev_close+0x47/0x50 [ 227.651765][T19181] __fput+0x246/0x4d0 [ 227.655713][T19181] ____fput+0x11/0x20 [ 227.659673][T19181] task_work_run+0x8e/0x110 [ 227.664146][T19181] exit_to_user_mode_prepare+0x1b2/0x210 [ 227.669752][T19181] syscall_exit_to_user_mode+0x16/0x30 [ 227.675181][T19181] do_syscall_64+0x45/0x80 [ 227.679571][T19181] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 227.685429][T19181] [ 227.687768][T19181] read to 0xffffea00023b9758 of 8 bytes by task 19181 on cpu 1: [ 227.695398][T19181] page_mapping+0x13b/0x200 [ 227.699872][T19181] __pagevec_lru_add_fn+0xb1/0x580 [ 227.705991][T19181] pagevec_lru_move_fn+0xff/0x190 [ 227.710983][T19181] lru_add_drain_cpu+0x75/0x2e0 [ 227.715813][T19181] lru_add_drain+0x21/0x60 [ 227.720207][T19181] exit_mmap+0x199/0x3b0 [ 227.724418][T19181] __mmput+0xa2/0x220 [ 227.728378][T19181] mmput+0x38/0x40 [ 227.732065][T19181] exit_mm+0x2c8/0x330 [ 227.736100][T19181] do_exit+0x40f/0x16c0 [ 227.740221][T19181] do_group_exit+0xcb/0x180 [ 227.744789][T19181] get_signal+0xe9f/0x1650 [ 227.749182][T19181] arch_do_signal+0x25/0x270 [ 227.753764][T19181] exit_to_user_mode_prepare+0x124/0x210 [ 227.759371][T19181] syscall_exit_to_user_mode+0x16/0x30 [ 227.764796][T19181] do_syscall_64+0x45/0x80 [ 227.769181][T19181] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 227.775033][T19181] [ 227.777329][T19181] Reported by Kernel Concurrency Sanitizer on: [ 227.783449][T19181] CPU: 1 PID: 19181 Comm: syz-executor.5 Not tainted 5.9.0-rc4-syzkaller #0 [ 227.792081][T19181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 227.802104][T19181] ================================================================== [ 227.810144][T19181] Kernel panic - not syncing: panic_on_warn set ... [ 227.816712][T19181] CPU: 1 PID: 19181 Comm: syz-executor.5 Not tainted 5.9.0-rc4-syzkaller #0 [ 227.825347][T19181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 227.835371][T19181] Call Trace: [ 227.838634][T19181] dump_stack+0x10f/0x19d [ 227.842944][T19181] panic+0x207/0x64a [ 227.846821][T19181] ? vprintk_emit+0x44a/0x4f0 [ 227.851556][T19181] kcsan_report+0x684/0x690 [ 227.856035][T19181] ? kcsan_setup_watchpoint+0x41e/0x4a0 [ 227.861557][T19181] ? page_mapping+0x13b/0x200 [ 227.866220][T19181] ? __pagevec_lru_add_fn+0xb1/0x580 [ 227.871482][T19181] ? pagevec_lru_move_fn+0xff/0x190 [ 227.876647][T19181] ? lru_add_drain_cpu+0x75/0x2e0 [ 227.881638][T19181] ? lru_add_drain+0x21/0x60 [ 227.886196][T19181] ? exit_mmap+0x199/0x3b0 [ 227.890593][T19181] ? __mmput+0xa2/0x220 [ 227.894723][T19181] ? mmput+0x38/0x40 [ 227.898592][T19181] ? exit_mm+0x2c8/0x330 [ 227.902802][T19181] ? do_exit+0x40f/0x16c0 [ 227.907097][T19181] ? do_group_exit+0xcb/0x180 [ 227.911742][T19181] ? get_signal+0xe9f/0x1650 [ 227.916300][T19181] ? arch_do_signal+0x25/0x270 [ 227.921031][T19181] ? exit_to_user_mode_prepare+0x124/0x210 [ 227.926804][T19181] ? syscall_exit_to_user_mode+0x16/0x30 [ 227.932403][T19181] ? do_syscall_64+0x45/0x80 [ 227.936973][T19181] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 227.943026][T19181] kcsan_setup_watchpoint+0x41e/0x4a0 [ 227.948379][T19181] page_mapping+0x13b/0x200 [ 227.952853][T19181] __pagevec_lru_add_fn+0xb1/0x580 [ 227.957944][T19181] pagevec_lru_move_fn+0xff/0x190 [ 227.962935][T19181] ? lru_add_page_tail+0x3f0/0x3f0 [ 227.968023][T19181] lru_add_drain_cpu+0x75/0x2e0 [ 227.972839][T19181] lru_add_drain+0x21/0x60 [ 227.977226][T19181] exit_mmap+0x199/0x3b0 [ 227.981436][T19181] ? __khugepaged_exit+0x1d5/0x210 [ 227.986514][T19181] __mmput+0xa2/0x220 [ 227.991958][T19181] mmput+0x38/0x40 [ 227.995645][T19181] exit_mm+0x2c8/0x330 [ 227.999693][T19181] ? taskstats_exit+0x339/0x740 [ 228.004512][T19181] ? acct_collect+0x38e/0x3a0 [ 228.009165][T19181] do_exit+0x40f/0x16c0 [ 228.013298][T19181] ? __fput+0x42b/0x4d0 [ 228.017421][T19181] do_group_exit+0xcb/0x180 [ 228.021891][T19181] get_signal+0xe9f/0x1650 [ 228.026278][T19181] ? putname+0xa5/0xc0 [ 228.030329][T19181] arch_do_signal+0x25/0x270 [ 228.034886][T19181] ? task_work_add+0x16b/0x1c0 [ 228.039617][T19181] ? fput+0x108/0x130 [ 228.043569][T19181] exit_to_user_mode_prepare+0x124/0x210 [ 228.049188][T19181] syscall_exit_to_user_mode+0x16/0x30 [ 228.054614][T19181] do_syscall_64+0x45/0x80 [ 228.059000][T19181] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 228.064860][T19181] RIP: 0033:0x45d427 [ 228.068718][T19181] Code: Bad RIP value. [ 228.072750][T19181] RSP: 002b:00007fbc572c59f8 EFLAGS: 00000202 ORIG_RAX: 0000000000000010 [ 228.081136][T19181] RAX: 0000000000000000 RBX: 0000000020000080 RCX: 000000000045d427 [ 228.089085][T19181] RDX: 00007fbc572c5ac0 RSI: 0000000000004c04 RDI: 0000000000000004 [ 228.097024][T19181] RBP: 000000000118cf80 R08: 00000000200004a0 R09: 0000000000000000 [ 228.104963][T19181] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000118cf4c [ 228.112902][T19181] R13: 00007ffdb542e23f R14: 00007fbc572c69c0 R15: 000000000118cf4c [ 229.181286][T19181] Shutting down cpus with NMI [ 229.187078][T19181] Kernel Offset: disabled [ 229.191420][T19181] Rebooting in 86400 seconds..