uct=0003, bcdDevice= 0.00 [ 910.460624][T11066] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 910.469201][T11066] usb 3-1: config 0 descriptor?? [ 911.208135][T11066] usbhid 3-1:0.0: can't add hid device: -71 [ 911.214144][T11066] usbhid: probe of 3-1:0.0 failed with error -71 [ 911.222187][T11066] usb 3-1: USB disconnect, device number 101 12:16:52 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000640)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe8f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x20}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0xfffffffffffffd58, &(0x7f0000005380)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x20, {[@main=@item_4={0x3, 0x0, 0x0, "269b771b"}, @global=@item_4={0x3, 0x1, 0x0, "bef90700"}, @main=@item_012={0x2, 0x0, 0x0, "aa7a"}, @main=@item_4={0x3, 0x0, 0x0, "5db5646d"}, @global=@item_4={0x3, 0x1, 0x0, "88fbd3e0"}, @local=@item_4={0x3, 0x2, 0x0, "9d360e65"}, @main=@item_012={0x1, 0x0, 0x0, "a7"}, @main=@item_012={0x1, 0x0, 0x0, '~'}]}}, 0x0}, 0x0) 12:16:52 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a002400ff45ac0000ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:16:52 executing program 4: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x5a, 0x0, 0x0, 0x0, 0xd}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x4000000000001b4, 0x0) r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$packet(0x11, 0x2, 0x300) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x135}) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) ioctl$TIOCL_UNBLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) r3 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r3) keyctl$restrict_keyring(0x1d, r3, 0x0, 0x0) keyctl$link(0x8, r3, r3) keyctl$set_timeout(0xf, r3, 0x1000) process_vm_writev(0x0, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ioctl$BLKRAGET(r2, 0x1263, &(0x7f00000001c0)) ptrace$cont(0x9, 0x0, 0x0, 0x0) 12:16:52 executing program 0: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x5a, 0x0, 0x0, 0x0, 0xd}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x4000000000001b4, 0x0) r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$packet(0x11, 0x2, 0x300) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x135}) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) ioctl$TIOCL_UNBLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) r3 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r3) keyctl$restrict_keyring(0x1d, r3, 0x0, 0x0) keyctl$link(0x8, r3, r3) keyctl$set_timeout(0xf, r3, 0x1000) process_vm_writev(0x0, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ioctl$BLKRAGET(r2, 0x1263, &(0x7f00000001c0)) ptrace$cont(0x9, 0x0, 0x0, 0x0) 12:16:52 executing program 1: timer_create(0x0, 0x0, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000200)={0x0, 0x989680}, &(0x7f0000000100)) 12:16:52 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$tun(0xffffffffffffffff, 0x0, 0x3a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) 12:16:52 executing program 0: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x80045432, &(0x7f0000000040)) ioctl$TIOCNOTTY(r0, 0x5422) r1 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r2, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x39) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r2, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x5) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001080)=[{&(0x7f0000000240)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000540)=[{&(0x7f00000002c0)="fa8da82e0fa3891a1d8529da6d9e61c204919e04204c4b8c596551c8d5011eab921143f899042a7c17025aefc3486b93c2202a925c083d2a94e133f7e4eac1f6c804719bffc1347ee20c83d5ede41c5e1fd8157dff857f6ef623948e70ed4d30f2171a4b7d867c8cb7a88648832863a66d457f8ac1c12b664e5050646b4531ba", 0x80}, {&(0x7f0000000340)="9c055e9cc576473a1e6325eea362817970e6844d640cd27a5b2e2df785bd95835d397a484c9421bf7508494b6c15b984bf8d64b4ae09ae79a1a7570b0bbf1e98b9bc429fc59c227afa7c585272bcb67662f46f985157a084d336251e01d4f6dcd5e080ab4f549fc904e2bf581f5b16e993914a9c602a576ee6050573edabb812bea15236a12892aa3037db37be131ebdfe6374a78fd05cb8c344b745f57bc152bb0e2afe64fb", 0xa6}, {&(0x7f0000000400)="ae4d5aaac633d2abe10bf6ee5056b8086366cf3dc3c0b396c0fa9a4e16a1be9d47783e7494f0e9e6dc224690f32d28acfb87e7af29cdb9f0155752166bbe160ee6d39463a6426028dec554afb6470831fb5aaf45381491c9eb48cef280e16c6ca874953ac785ca0904190026bdae2c6a484384a7b64af191e816cfd4927df662d931bfad81ade7937c5ff0a4", 0x8c}, {&(0x7f0000000000)="ff9ac6f91c83623209c097", 0xb}, {&(0x7f00000004c0)="7c50165e7dbccd860c070ce6571ecba41021d6b7938c275e20b0024e9894f7a834e381b66897984a9826f236e7fdb7b3e174020fc6e2dcbfc2b4bdbf328434d26cf3c51c96006b72d0d6d2d5f6f30d59e6857756e690ece42035ce095c48d6faa3fc6b7e4718aba0087ff4c4cc69208157ce", 0x72}], 0x5, &(0x7f0000000680)=[@cred={{0x1c, 0x1, 0x2, {r1}}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60, 0x40001}, {&(0x7f0000000700)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000880)=[{&(0x7f0000000780)="93ac7674bc48f4bcd1f00c24f85fc69b2930ce528ce543a3fc24e4d8ba5c44c4b1ac33d450a1fbd42a6c043d619c324e69217ea5f83544ad7cc038f94bb6f97e644257f380e2301162b5564fbe9e8481d4", 0x51}, {&(0x7f0000000800)="e0adff25ebf21d155e910e9af2346155edf8dbea8580f6365eff757f75d9020144174753f4620021104ba6cbfb5ce146f4475f5978529db85486a6b195a4e0e67b757f671d5253154731073e598aa6a5f1f2c51b21530c6211600769f7dff516b35b6157e1", 0x65}], 0x2, &(0x7f0000000c00)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r2}}}, @rights={{0x18, 0x1, 0x1, [r0, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, r4, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc8, 0x40044}, {&(0x7f0000000d00)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000f40)=[{&(0x7f0000000d80)="903ff4423dc412be07340b7e0808c205fd949c70e7a362f83ec75f2ffd378a5b406ea65e4b4b3f96f7edee6bc182489455e0b1e13366052fe7eb035cd23278fc595981135f5729cddba4fe3d89578fb61d775b858f846dec1b0c7a468ba128a9c4bbc1de5464e32c12152b14e3bacb07b361cc081b09a5a05e502c736f9300e66293ff5b0981bcab3a47b57498b6341769ff3f5c6876e443015e6c334a591c8a33d9f8fbad8c0048f91d08a259bb768ec047bef5bab93dbfc3ad2706b9d12bd7e71e4fc77a392a6b0aeb7be158a92e19fed1a6a3a14161014bacbc6516f68d3b6ae1fc47baf06daca6c99ed3edc87d", 0xef}, {&(0x7f0000000e80)="bfd88578ab3cbc0841ee4b57d91938a9f919ad1469c652cbd8ad230a0f17b2de005a977d67e7a59b2168da581eec9e8352cb932744f2bb2f2dc3d997b577c150e14def55a4b197736de6a6da954e5ce77ef4cff7ce77eb9045b8f4bb9bb46f12a7f39107ad21c7da24eba0a47eab5097fe380e2a7e31f2f20addd0d08ee2169c0697b639", 0x84}], 0x2, &(0x7f0000000fc0)=[@rights={{0x1c, 0x1, 0x1, [r0, r0, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [r4, r0, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x98}], 0x3, 0x14) 12:16:52 executing program 1: timer_create(0x0, 0x0, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000200)={0x0, 0x989680}, &(0x7f0000000100)) 12:16:52 executing program 1: timer_create(0x0, 0x0, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000200)={0x0, 0x989680}, &(0x7f0000000100)) 12:16:52 executing program 4: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x5a, 0x0, 0x0, 0x0, 0xd}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x4000000000001b4, 0x0) r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$packet(0x11, 0x2, 0x300) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x135}) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) ioctl$TIOCL_UNBLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) r3 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r3) keyctl$restrict_keyring(0x1d, r3, 0x0, 0x0) keyctl$link(0x8, r3, r3) keyctl$set_timeout(0xf, r3, 0x1000) process_vm_writev(0x0, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ioctl$BLKRAGET(r2, 0x1263, &(0x7f00000001c0)) ptrace$cont(0x9, 0x0, 0x0, 0x0) 12:16:52 executing program 1: timer_create(0x0, &(0x7f00000000c0), &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000200)={0x0, 0x989680}, &(0x7f0000000100)) [ 911.708794][T17053] loop3: p1 p2 p3 p4 [ 911.716852][T17053] loop3: p1 start 2359306 is beyond EOD, truncated [ 911.733376][T17053] loop3: p2 start 25 is beyond EOD, truncated [ 911.743982][T17053] loop3: p3 start 4293001441 is beyond EOD, truncated 12:16:52 executing program 4: write(0xffffffffffffffff, &(0x7f0000000300)="fc0000001c000741f490cd011cf25455c9ab08000800000003007738210001c000000000000000000c00ff0000039815fa2d1ec28656aaa79bb94b46fe0000000a0002", 0x43) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14) close(r2) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$netlink(0x10, 0x3, 0x0) dup(r3) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 911.759544][T17053] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 911.849276][T17076] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17076 comm=syz-executor.4 [ 911.862179][T17076] __nla_validate_parse: 2 callbacks suppressed [ 911.862182][T17076] netlink: 176 bytes leftover after parsing attributes in process `syz-executor.4'. [ 911.937991][ T113] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 912.177969][ T113] usb 3-1: Using ep0 maxpacket: 16 [ 912.298051][ T113] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 912.309070][ T113] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 912.319094][ T113] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 912.331968][ T113] usb 3-1: New USB device found, idVendor=0e8f, idProduct=0003, bcdDevice= 0.00 [ 912.341026][ T113] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 912.349678][ T113] usb 3-1: config 0 descriptor?? [ 912.688010][ T113] usbhid 3-1:0.0: can't add hid device: -71 [ 912.694077][ T113] usbhid: probe of 3-1:0.0 failed with error -71 [ 912.701772][ T113] usb 3-1: USB disconnect, device number 102 [ 913.157940][ T113] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 913.407923][ T113] usb 3-1: Using ep0 maxpacket: 16 [ 913.527985][ T113] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 913.538888][ T113] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 913.548625][ T113] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 913.561430][ T113] usb 3-1: New USB device found, idVendor=0e8f, idProduct=0003, bcdDevice= 0.00 [ 913.570465][ T113] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 913.579081][ T113] usb 3-1: config 0 descriptor?? [ 914.048664][ T113] pantherlord 0003:0E8F:0003.0005: unknown main item tag 0x0 [ 914.056123][ T113] pantherlord 0003:0E8F:0003.0005: unknown main item tag 0x0 [ 914.063543][ T113] pantherlord 0003:0E8F:0003.0005: unknown main item tag 0x0 [ 914.070974][ T113] pantherlord 0003:0E8F:0003.0005: unknown main item tag 0x0 [ 914.078370][ T113] pantherlord 0003:0E8F:0003.0005: unknown main item tag 0x0 [ 914.086427][ T113] pantherlord 0003:0E8F:0003.0005: hidraw0: USB HID v0.00 Device [HID 0e8f:0003] on usb-dummy_hcd.2-1/input0 [ 914.098005][ T113] pantherlord 0003:0E8F:0003.0005: no output reports found [ 914.249124][ T113] usb 3-1: USB disconnect, device number 103 12:16:55 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000640)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe8f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x20}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0xfffffffffffffd58, &(0x7f0000005380)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x20, {[@main=@item_4={0x3, 0x0, 0x0, "269b771b"}, @global=@item_4={0x3, 0x1, 0x0, "bef90700"}, @main=@item_012={0x2, 0x0, 0x0, "aa7a"}, @main=@item_4={0x3, 0x0, 0x0, "5db5646d"}, @global=@item_4={0x3, 0x1, 0x0, "88fbd3e0"}, @local=@item_4={0x3, 0x2, 0x0, "9d360e65"}, @main=@item_012={0x1, 0x0, 0x0, "a7"}, @main=@item_012={0x1, 0x0, 0x0, '~'}]}}, 0x0}, 0x0) 12:16:55 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a002500ff45ac0000ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:16:55 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x3a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) 12:16:55 executing program 4: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) dup(r2) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@private0={0xfc, 0x0, [], 0x1}, 0x6b}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x8) tkill(r0, 0x39) modify_ldt$read(0x0, &(0x7f0000000240)=""/220, 0xdc) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:16:55 executing program 0: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x80045432, &(0x7f0000000040)) ioctl$TIOCNOTTY(r0, 0x5422) r1 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r2, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x39) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r2, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x5) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001080)=[{&(0x7f0000000240)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000540)=[{&(0x7f00000002c0)="fa8da82e0fa3891a1d8529da6d9e61c204919e04204c4b8c596551c8d5011eab921143f899042a7c17025aefc3486b93c2202a925c083d2a94e133f7e4eac1f6c804719bffc1347ee20c83d5ede41c5e1fd8157dff857f6ef623948e70ed4d30f2171a4b7d867c8cb7a88648832863a66d457f8ac1c12b664e5050646b4531ba", 0x80}, {&(0x7f0000000340)="9c055e9cc576473a1e6325eea362817970e6844d640cd27a5b2e2df785bd95835d397a484c9421bf7508494b6c15b984bf8d64b4ae09ae79a1a7570b0bbf1e98b9bc429fc59c227afa7c585272bcb67662f46f985157a084d336251e01d4f6dcd5e080ab4f549fc904e2bf581f5b16e993914a9c602a576ee6050573edabb812bea15236a12892aa3037db37be131ebdfe6374a78fd05cb8c344b745f57bc152bb0e2afe64fb", 0xa6}, {&(0x7f0000000400)="ae4d5aaac633d2abe10bf6ee5056b8086366cf3dc3c0b396c0fa9a4e16a1be9d47783e7494f0e9e6dc224690f32d28acfb87e7af29cdb9f0155752166bbe160ee6d39463a6426028dec554afb6470831fb5aaf45381491c9eb48cef280e16c6ca874953ac785ca0904190026bdae2c6a484384a7b64af191e816cfd4927df662d931bfad81ade7937c5ff0a4", 0x8c}, {&(0x7f0000000000)="ff9ac6f91c83623209c097", 0xb}, {&(0x7f00000004c0)="7c50165e7dbccd860c070ce6571ecba41021d6b7938c275e20b0024e9894f7a834e381b66897984a9826f236e7fdb7b3e174020fc6e2dcbfc2b4bdbf328434d26cf3c51c96006b72d0d6d2d5f6f30d59e6857756e690ece42035ce095c48d6faa3fc6b7e4718aba0087ff4c4cc69208157ce", 0x72}], 0x5, &(0x7f0000000680)=[@cred={{0x1c, 0x1, 0x2, {r1}}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60, 0x40001}, {&(0x7f0000000700)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000880)=[{&(0x7f0000000780)="93ac7674bc48f4bcd1f00c24f85fc69b2930ce528ce543a3fc24e4d8ba5c44c4b1ac33d450a1fbd42a6c043d619c324e69217ea5f83544ad7cc038f94bb6f97e644257f380e2301162b5564fbe9e8481d4", 0x51}, {&(0x7f0000000800)="e0adff25ebf21d155e910e9af2346155edf8dbea8580f6365eff757f75d9020144174753f4620021104ba6cbfb5ce146f4475f5978529db85486a6b195a4e0e67b757f671d5253154731073e598aa6a5f1f2c51b21530c6211600769f7dff516b35b6157e1", 0x65}], 0x2, &(0x7f0000000c00)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r2}}}, @rights={{0x18, 0x1, 0x1, [r0, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, r4, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc8, 0x40044}, {&(0x7f0000000d00)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000f40)=[{&(0x7f0000000d80)="903ff4423dc412be07340b7e0808c205fd949c70e7a362f83ec75f2ffd378a5b406ea65e4b4b3f96f7edee6bc182489455e0b1e13366052fe7eb035cd23278fc595981135f5729cddba4fe3d89578fb61d775b858f846dec1b0c7a468ba128a9c4bbc1de5464e32c12152b14e3bacb07b361cc081b09a5a05e502c736f9300e66293ff5b0981bcab3a47b57498b6341769ff3f5c6876e443015e6c334a591c8a33d9f8fbad8c0048f91d08a259bb768ec047bef5bab93dbfc3ad2706b9d12bd7e71e4fc77a392a6b0aeb7be158a92e19fed1a6a3a14161014bacbc6516f68d3b6ae1fc47baf06daca6c99ed3edc87d", 0xef}, {&(0x7f0000000e80)="bfd88578ab3cbc0841ee4b57d91938a9f919ad1469c652cbd8ad230a0f17b2de005a977d67e7a59b2168da581eec9e8352cb932744f2bb2f2dc3d997b577c150e14def55a4b197736de6a6da954e5ce77ef4cff7ce77eb9045b8f4bb9bb46f12a7f39107ad21c7da24eba0a47eab5097fe380e2a7e31f2f20addd0d08ee2169c0697b639", 0x84}], 0x2, &(0x7f0000000fc0)=[@rights={{0x1c, 0x1, 0x1, [r0, r0, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [r4, r0, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x98}], 0x3, 0x14) 12:16:55 executing program 1: timer_create(0x0, &(0x7f00000000c0), &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000200)={0x0, 0x989680}, &(0x7f0000000100)) [ 914.826130][T17097] loop3: p1 p2 p3 p4 [ 914.830444][T17097] loop3: p1 start 2424842 is beyond EOD, truncated [ 914.839265][T17097] loop3: p2 start 25 is beyond EOD, truncated [ 914.845777][T17097] loop3: p3 start 4293001441 is beyond EOD, truncated [ 914.853112][T17097] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:16:55 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0ab92600ff45ac0000ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 914.948208][T17097] loop3: p1 p2 p3 p4 [ 914.952398][T17097] loop3: p1 start 2424842 is beyond EOD, truncated [ 914.959057][T17097] loop3: p2 start 25 is beyond EOD, truncated [ 914.965190][T17097] loop3: p3 start 4293001441 is beyond EOD, truncated [ 914.971985][T17097] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 915.047847][ T113] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 915.148437][T17112] loop3: p1 p2 p3 p4 [ 915.152631][T17112] loop3: p1 start 2537738 is beyond EOD, truncated [ 915.159802][T17112] loop3: p2 start 25 is beyond EOD, truncated [ 915.166006][T17112] loop3: p3 start 4293001441 is beyond EOD, truncated [ 915.173200][T17112] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:16:56 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a003f00ff45ac0000ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 915.258212][T17112] loop3: p1 p2 p3 p4 [ 915.263557][T17112] loop3: p1 start 2537738 is beyond EOD, truncated [ 915.270414][T17112] loop3: p2 start 25 is beyond EOD, truncated [ 915.276548][T17112] loop3: p3 start 4293001441 is beyond EOD, truncated [ 915.283484][T17112] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 915.297848][ T113] usb 3-1: Using ep0 maxpacket: 16 [ 915.358642][ T153] loop3: p1 p2 p3 p4 [ 915.362900][ T153] loop3: p1 start 2537738 is beyond EOD, truncated [ 915.369801][ T153] loop3: p2 start 25 is beyond EOD, truncated [ 915.375858][ T153] loop3: p3 start 4293001441 is beyond EOD, truncated [ 915.382838][ T153] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 915.427934][ T113] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 915.438955][ T113] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 915.449402][ T113] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 915.462584][ T113] usb 3-1: New USB device found, idVendor=0e8f, idProduct=0003, bcdDevice= 0.00 [ 915.472083][ T113] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 915.483642][ T113] usb 3-1: config 0 descriptor?? 12:16:56 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a004000ff45ac0000ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 915.528417][T17116] loop3: p1 p2 p3 p4 [ 915.532562][T17116] loop3: p1 start 4128778 is beyond EOD, truncated [ 915.539293][T17116] loop3: p2 start 25 is beyond EOD, truncated [ 915.545370][T17116] loop3: p3 start 4293001441 is beyond EOD, truncated [ 915.552144][T17116] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:16:56 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x3a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) [ 915.668793][T17120] loop3: p1 p2 p3 p4 [ 915.672966][T17120] loop3: p1 start 4194314 is beyond EOD, truncated [ 915.679754][T17120] loop3: p2 start 25 is beyond EOD, truncated [ 915.686096][T17120] loop3: p3 start 4293001441 is beyond EOD, truncated [ 915.693292][T17120] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 915.789967][T17120] loop3: p1 p2 p3 p4 [ 915.794120][T17120] loop3: p1 start 4194314 is beyond EOD, truncated [ 915.801302][T17120] loop3: p2 start 25 is beyond EOD, truncated [ 915.807463][T17120] loop3: p3 start 4293001441 is beyond EOD, truncated [ 915.814786][T17120] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 915.824403][ T153] loop3: p1 p2 p3 p4 [ 915.828811][ T153] loop3: p1 start 4194314 is beyond EOD, truncated 12:16:56 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a004800ff45ac0000ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 915.835404][ T153] loop3: p2 start 25 is beyond EOD, truncated [ 915.841916][ T153] loop3: p3 start 4293001441 is beyond EOD, truncated [ 915.847863][ T113] usbhid 3-1:0.0: can't add hid device: -71 [ 915.848767][ T153] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 915.854625][ T113] usbhid: probe of 3-1:0.0 failed with error -71 [ 915.870000][ T113] usb 3-1: USB disconnect, device number 104 [ 916.018465][T17126] loop3: p1 p2 p3 p4 [ 916.022669][T17126] loop3: p1 start 4718602 is beyond EOD, truncated [ 916.030374][T17126] loop3: p2 start 25 is beyond EOD, truncated [ 916.036464][T17126] loop3: p3 start 4293001441 is beyond EOD, truncated [ 916.043773][T17126] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:16:56 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a004c00ff45ac0000ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 916.158430][T17129] loop3: p1 p2 p3 p4 [ 916.162601][T17129] loop3: p1 start 4980746 is beyond EOD, truncated [ 916.170016][T17129] loop3: p2 start 25 is beyond EOD, truncated [ 916.176174][T17129] loop3: p3 start 4293001441 is beyond EOD, truncated [ 916.183575][T17129] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 916.327784][ T113] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 916.587868][ T113] usb 3-1: Using ep0 maxpacket: 16 [ 916.707836][ T113] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 916.718793][ T113] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 916.729120][ T113] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 916.742322][ T113] usb 3-1: New USB device found, idVendor=0e8f, idProduct=0003, bcdDevice= 0.00 [ 916.751688][ T113] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 916.760600][ T113] usb 3-1: config 0 descriptor?? [ 917.238508][ T113] pantherlord 0003:0E8F:0003.0006: unknown main item tag 0x0 [ 917.245948][ T113] pantherlord 0003:0E8F:0003.0006: unknown main item tag 0x0 [ 917.253359][ T113] pantherlord 0003:0E8F:0003.0006: unknown main item tag 0x0 [ 917.260774][ T113] pantherlord 0003:0E8F:0003.0006: unknown main item tag 0x0 [ 917.268173][ T113] pantherlord 0003:0E8F:0003.0006: unknown main item tag 0x0 [ 917.276217][ T113] pantherlord 0003:0E8F:0003.0006: hidraw0: USB HID v0.00 Device [HID 0e8f:0003] on usb-dummy_hcd.2-1/input0 [ 917.287831][ T113] pantherlord 0003:0E8F:0003.0006: no output reports found [ 917.439020][ T113] usb 3-1: USB disconnect, device number 105 12:16:58 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000640)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe8f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x20}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0xfffffffffffffd58, &(0x7f0000005380)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x20, {[@main=@item_4={0x3, 0x0, 0x0, "269b771b"}, @global=@item_4={0x3, 0x1, 0x0, "bef90700"}, @main=@item_012={0x2, 0x0, 0x0, "aa7a"}, @main=@item_4={0x3, 0x0, 0x0, "5db5646d"}, @global=@item_4={0x3, 0x1, 0x0, "88fbd3e0"}, @local=@item_4={0x3, 0x2, 0x0, "9d360e65"}, @main=@item_012={0x1, 0x0, 0x0, "a7"}, @main=@item_012={0x1, 0x0, 0x0, '~'}]}}, 0x0}, 0x0) 12:16:58 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x3a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) 12:16:58 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a006000ff45ac0000ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:16:58 executing program 1: timer_create(0x0, &(0x7f00000000c0), &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000200)={0x0, 0x989680}, &(0x7f0000000100)) 12:16:58 executing program 4: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) dup(r2) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@private0={0xfc, 0x0, [], 0x1}, 0x6b}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x8) tkill(r0, 0x39) modify_ldt$read(0x0, &(0x7f0000000240)=""/220, 0xdc) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:16:58 executing program 0: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x80045432, &(0x7f0000000040)) ioctl$TIOCNOTTY(r0, 0x5422) r1 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r2, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x39) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r2, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x5) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001080)=[{&(0x7f0000000240)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000540)=[{&(0x7f00000002c0)="fa8da82e0fa3891a1d8529da6d9e61c204919e04204c4b8c596551c8d5011eab921143f899042a7c17025aefc3486b93c2202a925c083d2a94e133f7e4eac1f6c804719bffc1347ee20c83d5ede41c5e1fd8157dff857f6ef623948e70ed4d30f2171a4b7d867c8cb7a88648832863a66d457f8ac1c12b664e5050646b4531ba", 0x80}, {&(0x7f0000000340)="9c055e9cc576473a1e6325eea362817970e6844d640cd27a5b2e2df785bd95835d397a484c9421bf7508494b6c15b984bf8d64b4ae09ae79a1a7570b0bbf1e98b9bc429fc59c227afa7c585272bcb67662f46f985157a084d336251e01d4f6dcd5e080ab4f549fc904e2bf581f5b16e993914a9c602a576ee6050573edabb812bea15236a12892aa3037db37be131ebdfe6374a78fd05cb8c344b745f57bc152bb0e2afe64fb", 0xa6}, {&(0x7f0000000400)="ae4d5aaac633d2abe10bf6ee5056b8086366cf3dc3c0b396c0fa9a4e16a1be9d47783e7494f0e9e6dc224690f32d28acfb87e7af29cdb9f0155752166bbe160ee6d39463a6426028dec554afb6470831fb5aaf45381491c9eb48cef280e16c6ca874953ac785ca0904190026bdae2c6a484384a7b64af191e816cfd4927df662d931bfad81ade7937c5ff0a4", 0x8c}, {&(0x7f0000000000)="ff9ac6f91c83623209c097", 0xb}, {&(0x7f00000004c0)="7c50165e7dbccd860c070ce6571ecba41021d6b7938c275e20b0024e9894f7a834e381b66897984a9826f236e7fdb7b3e174020fc6e2dcbfc2b4bdbf328434d26cf3c51c96006b72d0d6d2d5f6f30d59e6857756e690ece42035ce095c48d6faa3fc6b7e4718aba0087ff4c4cc69208157ce", 0x72}], 0x5, &(0x7f0000000680)=[@cred={{0x1c, 0x1, 0x2, {r1}}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60, 0x40001}, {&(0x7f0000000700)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000880)=[{&(0x7f0000000780)="93ac7674bc48f4bcd1f00c24f85fc69b2930ce528ce543a3fc24e4d8ba5c44c4b1ac33d450a1fbd42a6c043d619c324e69217ea5f83544ad7cc038f94bb6f97e644257f380e2301162b5564fbe9e8481d4", 0x51}, {&(0x7f0000000800)="e0adff25ebf21d155e910e9af2346155edf8dbea8580f6365eff757f75d9020144174753f4620021104ba6cbfb5ce146f4475f5978529db85486a6b195a4e0e67b757f671d5253154731073e598aa6a5f1f2c51b21530c6211600769f7dff516b35b6157e1", 0x65}], 0x2, &(0x7f0000000c00)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r2}}}, @rights={{0x18, 0x1, 0x1, [r0, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, r4, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc8, 0x40044}, {&(0x7f0000000d00)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000f40)=[{&(0x7f0000000d80)="903ff4423dc412be07340b7e0808c205fd949c70e7a362f83ec75f2ffd378a5b406ea65e4b4b3f96f7edee6bc182489455e0b1e13366052fe7eb035cd23278fc595981135f5729cddba4fe3d89578fb61d775b858f846dec1b0c7a468ba128a9c4bbc1de5464e32c12152b14e3bacb07b361cc081b09a5a05e502c736f9300e66293ff5b0981bcab3a47b57498b6341769ff3f5c6876e443015e6c334a591c8a33d9f8fbad8c0048f91d08a259bb768ec047bef5bab93dbfc3ad2706b9d12bd7e71e4fc77a392a6b0aeb7be158a92e19fed1a6a3a14161014bacbc6516f68d3b6ae1fc47baf06daca6c99ed3edc87d", 0xef}, {&(0x7f0000000e80)="bfd88578ab3cbc0841ee4b57d91938a9f919ad1469c652cbd8ad230a0f17b2de005a977d67e7a59b2168da581eec9e8352cb932744f2bb2f2dc3d997b577c150e14def55a4b197736de6a6da954e5ce77ef4cff7ce77eb9045b8f4bb9bb46f12a7f39107ad21c7da24eba0a47eab5097fe380e2a7e31f2f20addd0d08ee2169c0697b639", 0x84}], 0x2, &(0x7f0000000fc0)=[@rights={{0x1c, 0x1, 0x1, [r0, r0, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [r4, r0, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x98}], 0x3, 0x14) 12:16:58 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a006800ff45ac0000ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 917.998252][T17154] loop3: p1 p2 p3 p4 [ 918.002414][T17154] loop3: p1 start 6291466 is beyond EOD, truncated [ 918.009820][T17154] loop3: p2 start 25 is beyond EOD, truncated [ 918.015962][T17154] loop3: p3 start 4293001441 is beyond EOD, truncated [ 918.023232][T17154] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:16:58 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a006c00ff45ac0000ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 918.130419][T17160] loop3: p1 p2 p3 p4 [ 918.134584][T17160] loop3: p1 start 6815754 is beyond EOD, truncated [ 918.141614][T17160] loop3: p2 start 25 is beyond EOD, truncated [ 918.148047][T17160] loop3: p3 start 4293001441 is beyond EOD, truncated [ 918.154927][T17160] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:16:58 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a007400ff45ac0000ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 918.237765][ T113] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 918.248168][T17163] loop3: p1 p2 p3 p4 [ 918.252294][T17163] loop3: p1 start 7077898 is beyond EOD, truncated [ 918.259257][T17163] loop3: p2 start 25 is beyond EOD, truncated [ 918.265429][T17163] loop3: p3 start 4293001441 is beyond EOD, truncated [ 918.272688][T17163] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:16:59 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a007a00ff45ac0000ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 918.398712][T17166] loop3: p1 p2 p3 p4 [ 918.402847][T17166] loop3: p1 start 7602186 is beyond EOD, truncated [ 918.409659][T17166] loop3: p2 start 25 is beyond EOD, truncated [ 918.415743][T17166] loop3: p3 start 4293001441 is beyond EOD, truncated [ 918.422646][T17166] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 918.508145][T17169] loop3: p1 p2 p3 p4 [ 918.512331][T17169] loop3: p1 start 7995402 is beyond EOD, truncated [ 918.517689][ T113] usb 3-1: Using ep0 maxpacket: 16 [ 918.519854][T17169] loop3: p2 start 25 is beyond EOD, truncated [ 918.530461][T17169] loop3: p3 start 4293001441 is beyond EOD, truncated [ 918.537210][T17169] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 918.628218][T17169] loop3: p1 p2 p3 p4 [ 918.633587][T17169] loop3: p1 start 7995402 is beyond EOD, truncated [ 918.640784][T17169] loop3: p2 start 25 is beyond EOD, truncated [ 918.646990][T17169] loop3: p3 start 4293001441 is beyond EOD, truncated [ 918.654213][T17169] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 918.657832][ T113] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 12:16:59 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a048000ff45ac0000ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 918.672550][ T113] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 918.674914][ T153] loop3: p1 p2 p3 p4 [ 918.683118][ T113] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 918.686882][ T153] loop3: p1 start 7995402 is beyond EOD, truncated [ 918.699729][ T113] usb 3-1: New USB device found, idVendor=0e8f, idProduct=0003, bcdDevice= 0.00 [ 918.705938][ T153] loop3: p2 start 25 is beyond EOD, truncated [ 918.715196][ T113] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 918.721172][ T153] loop3: p3 start 4293001441 is beyond EOD, truncated [ 918.730091][ T113] usb 3-1: config 0 descriptor?? [ 918.735969][ T153] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:16:59 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x3a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) [ 918.840685][T17173] loop3: p1 p2 p3 p4 [ 918.844881][T17173] loop3: p1 start 8389642 is beyond EOD, truncated [ 918.851501][T17173] loop3: p2 start 25 is beyond EOD, truncated [ 918.857751][T17173] loop3: p3 start 4293001441 is beyond EOD, truncated [ 918.864609][T17173] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 918.873291][ T153] loop3: p1 p2 p3 p4 [ 918.877577][ T153] loop3: p1 start 8389642 is beyond EOD, truncated [ 918.884188][ T153] loop3: p2 start 25 is beyond EOD, truncated [ 918.890691][ T153] loop3: p3 start 4293001441 is beyond EOD, truncated [ 918.897495][ T153] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 919.097700][ T113] usbhid 3-1:0.0: can't add hid device: -71 [ 919.103766][ T113] usbhid: probe of 3-1:0.0 failed with error -71 [ 919.111368][ T113] usb 3-1: USB disconnect, device number 106 [ 919.567676][ T113] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 919.807678][ T113] usb 3-1: Using ep0 maxpacket: 16 [ 919.927676][ T113] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 919.938627][ T113] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 919.949049][ T113] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 919.962244][ T113] usb 3-1: New USB device found, idVendor=0e8f, idProduct=0003, bcdDevice= 0.00 [ 919.971669][ T113] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 919.980890][ T113] usb 3-1: config 0 descriptor?? [ 920.458277][ T113] pantherlord 0003:0E8F:0003.0007: unknown main item tag 0x0 [ 920.465753][ T113] pantherlord 0003:0E8F:0003.0007: unknown main item tag 0x0 [ 920.474601][ T113] pantherlord 0003:0E8F:0003.0007: unknown main item tag 0x0 [ 920.482782][ T113] pantherlord 0003:0E8F:0003.0007: unknown main item tag 0x0 [ 920.491013][ T113] pantherlord 0003:0E8F:0003.0007: unknown main item tag 0x0 [ 920.499857][ T113] pantherlord 0003:0E8F:0003.0007: hidraw0: USB HID v0.00 Device [HID 0e8f:0003] on usb-dummy_hcd.2-1/input0 [ 920.512331][ T113] pantherlord 0003:0E8F:0003.0007: no output reports found [ 920.658845][T11066] usb 3-1: USB disconnect, device number 107 12:17:01 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x3a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) 12:17:01 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000640)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe8f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x20}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0xfffffffffffffd58, &(0x7f0000005380)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x1f, {[@main=@item_4={0x3, 0x0, 0x0, "269b771b"}, @global=@item_4={0x3, 0x1, 0x0, "bef90700"}, @main=@item_012={0x2, 0x0, 0x0, "aa7a"}, @main=@item_4={0x3, 0x0, 0x0, "5db5646d"}, @global=@item_4={0x3, 0x1, 0x0, "88fbd3e0"}, @local=@item_4={0x3, 0x2, 0x0, "9d360e65"}, @main=@item_012={0x1, 0x0, 0x0, "a7"}, @main=@item_012={0x0, 0x0, 0xa}]}}, 0x0}, 0x0) 12:17:01 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a009000ff45ac0000ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:17:01 executing program 1: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12}, 0x0) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000200)={0x0, 0x989680}, &(0x7f0000000100)) 12:17:01 executing program 4: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) dup(r2) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@private0={0xfc, 0x0, [], 0x1}, 0x6b}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x8) tkill(r0, 0x39) modify_ldt$read(0x0, &(0x7f0000000240)=""/220, 0xdc) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:17:01 executing program 0: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x80045432, &(0x7f0000000040)) ioctl$TIOCNOTTY(r0, 0x5422) r1 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r2, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x39) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r2, 0x0, 0x0) fsmount(r4, 0x0, 0x5) 12:17:01 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a26b900ff45ac0000ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 921.220520][T17201] loop3: p1 p2 p3 p4 [ 921.225855][T17201] loop3: p1 start 9437194 is beyond EOD, truncated [ 921.232877][T17201] loop3: p2 start 25 is beyond EOD, truncated [ 921.239252][T17201] loop3: p3 start 4293001441 is beyond EOD, truncated [ 921.246001][T17201] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:17:02 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a04f500ff45ac0000ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 921.367925][T17215] loop3: p1 p2 p3 p4 [ 921.372088][T17215] loop3: p1 start 12133898 is beyond EOD, truncated [ 921.378925][T17215] loop3: p2 start 25 is beyond EOD, truncated [ 921.385010][T17215] loop3: p3 start 4293001441 is beyond EOD, truncated [ 921.391806][T17215] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 921.447557][T11066] usb 3-1: new high-speed USB device number 108 using dummy_hcd 12:17:02 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a0fff00ff45ac0000ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 921.517942][T17218] loop3: p1 p2 p3 p4 [ 921.522298][T17218] loop3: p1 start 16057354 is beyond EOD, truncated [ 921.529507][T17218] loop3: p2 start 25 is beyond EOD, truncated [ 921.535606][T17218] loop3: p3 start 4293001441 is beyond EOD, truncated [ 921.542818][T17218] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 921.628054][T17221] loop3: p1 p2 p3 p4 [ 921.632278][T17221] loop3: p1 start 16715530 is beyond EOD, truncated [ 921.639078][T17221] loop3: p2 start 25 is beyond EOD, truncated [ 921.645227][T17221] loop3: p3 start 4293001441 is beyond EOD, truncated [ 921.652354][T17221] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 921.717539][T11066] usb 3-1: Using ep0 maxpacket: 16 12:17:02 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000200ff45ac0000ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 921.758031][T17221] loop3: p1 p2 p3 p4 [ 921.762259][T17221] loop3: p1 start 16715530 is beyond EOD, truncated [ 921.769064][T17221] loop3: p2 start 25 is beyond EOD, truncated [ 921.775255][T17221] loop3: p3 start 4293001441 is beyond EOD, truncated [ 921.782202][T17221] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 921.791332][ T153] loop3: p1 p2 p3 p4 [ 921.796647][ T153] loop3: p1 start 16715530 is beyond EOD, truncated [ 921.804012][ T153] loop3: p2 start 25 is beyond EOD, truncated [ 921.810411][ T153] loop3: p3 start 4293001441 is beyond EOD, truncated [ 921.817185][ T153] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 921.837622][T11066] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 921.848716][T11066] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 921.860671][T11066] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 921.873964][T11066] usb 3-1: New USB device found, idVendor=0e8f, idProduct=0003, bcdDevice= 0.00 [ 921.883394][T11066] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 921.892596][T11066] usb 3-1: config 0 descriptor?? [ 921.899078][T17225] loop3: p1 p2 p3 p4 [ 921.903167][T17225] loop3: p1 start 131082 is beyond EOD, truncated [ 921.910211][T17225] loop3: p2 start 25 is beyond EOD, truncated [ 921.916274][T17225] loop3: p3 start 4293001441 is beyond EOD, truncated [ 921.923599][T17225] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:17:02 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x3a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) 12:17:02 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000300ff45ac0000ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 921.997913][T17225] loop3: p1 p2 p3 p4 [ 922.002035][T17225] loop3: p1 start 131082 is beyond EOD, truncated [ 922.008587][T17225] loop3: p2 start 25 is beyond EOD, truncated [ 922.014661][T17225] loop3: p3 start 4293001441 is beyond EOD, truncated [ 922.021463][T17225] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 922.032477][ T153] loop3: p1 p2 p3 p4 [ 922.038015][ T153] loop3: p1 start 131082 is beyond EOD, truncated [ 922.044546][ T153] loop3: p2 start 25 is beyond EOD, truncated [ 922.051184][ T153] loop3: p3 start 4293001441 is beyond EOD, truncated [ 922.058279][ T153] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 922.127912][T17232] loop3: p1 p2 p3 p4 [ 922.132194][T17232] loop3: p1 start 196618 is beyond EOD, truncated [ 922.138817][T17232] loop3: p2 start 25 is beyond EOD, truncated [ 922.144924][T17232] loop3: p3 start 4293001441 is beyond EOD, truncated [ 922.151845][T17232] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:17:02 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000400ff45ac0000ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 922.237560][T11066] usbhid 3-1:0.0: can't add hid device: -71 [ 922.243587][T11066] usbhid: probe of 3-1:0.0 failed with error -71 [ 922.251290][T11066] usb 3-1: USB disconnect, device number 108 [ 922.258397][T17236] loop3: p1 p2 p3 p4 [ 922.262465][T17236] loop3: p1 start 262154 is beyond EOD, truncated [ 922.269605][T17236] loop3: p2 start 25 is beyond EOD, truncated [ 922.275691][T17236] loop3: p3 start 4293001441 is beyond EOD, truncated [ 922.282483][T17236] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 922.727508][T11066] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 922.977508][T11066] usb 3-1: Using ep0 maxpacket: 16 [ 923.097537][T11066] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 923.108544][T11066] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 923.118925][T11066] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 923.132140][T11066] usb 3-1: New USB device found, idVendor=0e8f, idProduct=0003, bcdDevice= 0.00 [ 923.141535][T11066] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 923.150460][T11066] usb 3-1: config 0 descriptor?? [ 923.887496][T11066] usbhid 3-1:0.0: can't add hid device: -71 [ 923.893465][T11066] usbhid: probe of 3-1:0.0 failed with error -71 [ 923.901518][T11066] usb 3-1: USB disconnect, device number 109 12:17:05 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000640)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe8f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x20}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0xfffffffffffffd58, &(0x7f0000005380)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x1f, {[@main=@item_4={0x3, 0x0, 0x0, "269b771b"}, @global=@item_4={0x3, 0x1, 0x0, "bef90700"}, @main=@item_012={0x2, 0x0, 0x0, "aa7a"}, @main=@item_4={0x3, 0x0, 0x0, "5db5646d"}, @global=@item_4={0x3, 0x1, 0x0, "88fbd3e0"}, @local=@item_4={0x3, 0x2, 0x0, "9d360e65"}, @main=@item_012={0x1, 0x0, 0x0, "a7"}, @main=@item_012={0x0, 0x0, 0xa}]}}, 0x0}, 0x0) 12:17:05 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000500ff45ac0000ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:17:05 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="a3286fd2dfffbbbbbbbbbbbb8100000086dd60163dac0a008800fe9ea3"], 0x3a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) 12:17:05 executing program 1: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12}, 0x0) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000200)={0x0, 0x989680}, &(0x7f0000000100)) 12:17:05 executing program 4: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) dup(r2) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@private0={0xfc, 0x0, [], 0x1}, 0x6b}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x8) tkill(r0, 0x39) modify_ldt$read(0x0, &(0x7f0000000240)=""/220, 0xdc) ptrace$cont(0x9, r1, 0x0, 0x0) 12:17:05 executing program 0: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x80045432, &(0x7f0000000040)) ioctl$TIOCNOTTY(r0, 0x5422) r1 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r2, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x39) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r2, 0x0, 0x0) [ 924.378396][T17259] loop3: p1 p2 p3 p4 [ 924.382586][T17259] loop3: p1 start 327690 is beyond EOD, truncated [ 924.389661][T17259] loop3: p2 start 25 is beyond EOD, truncated [ 924.395762][T17259] loop3: p3 start 4293001441 is beyond EOD, truncated [ 924.402994][T17259] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:17:05 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000600ff45ac0000ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:17:05 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000700ff45ac0000ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 924.517874][T17265] loop3: p1 p2 p3 p4 [ 924.522062][T17265] loop3: p1 start 393226 is beyond EOD, truncated [ 924.528687][T17265] loop3: p2 start 25 is beyond EOD, truncated [ 924.534803][T17265] loop3: p3 start 4293001441 is beyond EOD, truncated [ 924.541718][T17265] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 924.617409][ T113] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 924.638119][T17268] loop3: p1 p2 p3 p4 [ 924.642319][T17268] loop3: p1 start 458762 is beyond EOD, truncated [ 924.649267][T17268] loop3: p2 start 25 is beyond EOD, truncated [ 924.655387][T17268] loop3: p3 start 4293001441 is beyond EOD, truncated [ 924.662728][T17268] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:17:05 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000800ff45ac0000ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 924.747833][T17268] loop3: p1 p2 p3 p4 [ 924.751994][T17268] loop3: p1 start 458762 is beyond EOD, truncated [ 924.758776][T17268] loop3: p2 start 25 is beyond EOD, truncated [ 924.764854][T17268] loop3: p3 start 4293001441 is beyond EOD, truncated [ 924.771638][T17268] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 924.857405][ T113] usb 3-1: Using ep0 maxpacket: 16 12:17:05 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000900ff45ac0000ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 924.898005][T17272] loop3: p1 p2 p3 p4 [ 924.902209][T17272] loop3: p1 start 524298 is beyond EOD, truncated [ 924.909294][T17272] loop3: p2 start 25 is beyond EOD, truncated [ 924.915464][T17272] loop3: p3 start 4293001441 is beyond EOD, truncated [ 924.922791][T17272] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 924.997459][ T113] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 925.008771][ T113] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 925.009279][T17275] loop3: p1 p2 p3 p4 [ 925.019690][ T113] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 925.023068][T17275] loop3: p1 start 589834 is beyond EOD, truncated [ 925.036001][ T113] usb 3-1: New USB device found, idVendor=0e8f, idProduct=0003, bcdDevice= 0.00 [ 925.042055][T17275] loop3: p2 start 25 is beyond EOD, truncated [ 925.051377][ T113] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 925.057168][T17275] loop3: p3 start 4293001441 is beyond EOD, truncated [ 925.066416][ T113] usb 3-1: config 0 descriptor?? [ 925.074941][T17275] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:17:05 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="a3286fd2dfffbbbbbbbbbbbb8100000086dd60163dac0a008800fe9ea3"], 0x3a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) 12:17:05 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000a00ff45ac0000ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 925.184621][T17275] loop3: p1 p2 p3 p4 [ 925.191867][T17275] loop3: p1 start 589834 is beyond EOD, truncated [ 925.199262][T17275] loop3: p2 start 25 is beyond EOD, truncated [ 925.205453][T17275] loop3: p3 start 4293001441 is beyond EOD, truncated [ 925.213090][T17275] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 925.222442][ T153] loop3: p1 p2 p3 p4 [ 925.226728][ T153] loop3: p1 start 589834 is beyond EOD, truncated [ 925.233423][ T153] loop3: p2 start 25 is beyond EOD, truncated [ 925.239796][ T153] loop3: p3 start 4293001441 is beyond EOD, truncated [ 925.246561][ T153] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 925.333031][T17281] loop3: p1 p2 p3 p4 [ 925.337391][T17281] loop3: p1 start 655370 is beyond EOD, truncated [ 925.343848][T17281] loop3: p2 start 25 is beyond EOD, truncated [ 925.350025][T17281] loop3: p3 start 4293001441 is beyond EOD, truncated [ 925.356796][T17281] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 925.417429][ T113] usbhid 3-1:0.0: can't add hid device: -71 [ 925.423492][ T113] usbhid: probe of 3-1:0.0 failed with error -71 [ 925.432643][ T113] usb 3-1: USB disconnect, device number 110 [ 925.887383][ T113] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 926.147336][ T113] usb 3-1: Using ep0 maxpacket: 16 [ 926.277423][ T113] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 926.288492][ T113] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 926.298469][ T113] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 926.311305][ T113] usb 3-1: New USB device found, idVendor=0e8f, idProduct=0003, bcdDevice= 0.00 [ 926.320368][ T113] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 926.329178][ T113] usb 3-1: config 0 descriptor?? [ 927.067333][ T113] usbhid 3-1:0.0: can't add hid device: -71 [ 927.073353][ T113] usbhid: probe of 3-1:0.0 failed with error -71 [ 927.081441][ T113] usb 3-1: USB disconnect, device number 111 12:17:08 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000640)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe8f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x20}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0xfffffffffffffd58, &(0x7f0000005380)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x1f, {[@main=@item_4={0x3, 0x0, 0x0, "269b771b"}, @global=@item_4={0x3, 0x1, 0x0, "bef90700"}, @main=@item_012={0x2, 0x0, 0x0, "aa7a"}, @main=@item_4={0x3, 0x0, 0x0, "5db5646d"}, @global=@item_4={0x3, 0x1, 0x0, "88fbd3e0"}, @local=@item_4={0x3, 0x2, 0x0, "9d360e65"}, @main=@item_012={0x1, 0x0, 0x0, "a7"}, @main=@item_012={0x0, 0x0, 0xa}]}}, 0x0}, 0x0) 12:17:08 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000b00ff45ac0000ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:17:08 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="a3286fd2dfffbbbbbbbbbbbb8100000086dd60163dac0a008800fe9ea3"], 0x3a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) 12:17:08 executing program 1: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12}, 0x0) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000200)={0x0, 0x989680}, &(0x7f0000000100)) 12:17:08 executing program 4: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) dup(r2) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@private0={0xfc, 0x0, [], 0x1}, 0x6b}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x8) tkill(r0, 0x39) modify_ldt$read(0x0, &(0x7f0000000240)=""/220, 0xdc) ptrace$cont(0x9, r1, 0x0, 0x0) 12:17:08 executing program 0: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x80045432, &(0x7f0000000040)) ioctl$TIOCNOTTY(r0, 0x5422) r1 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r2, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x39) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r2, 0x0, 0x0) [ 927.577752][T17300] loop3: p1 p2 p3 p4 [ 927.581958][T17300] loop3: p1 start 720906 is beyond EOD, truncated [ 927.588661][T17300] loop3: p2 start 25 is beyond EOD, truncated [ 927.595069][T17300] loop3: p3 start 4293001441 is beyond EOD, truncated [ 927.602290][T17300] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:17:08 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000c00ff45ac0000ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 927.728351][T17313] loop3: p1 p2 p3 p4 [ 927.732514][T17313] loop3: p1 start 786442 is beyond EOD, truncated [ 927.739320][T17313] loop3: p2 start 25 is beyond EOD, truncated [ 927.745442][T17313] loop3: p3 start 4293001441 is beyond EOD, truncated [ 927.752500][T17313] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:17:08 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000d00ff45ac0000ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 927.807288][ T113] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 927.887647][T17316] loop3: p1 p2 p3 p4 [ 927.891874][T17316] loop3: p1 start 851978 is beyond EOD, truncated [ 927.898845][T17316] loop3: p2 start 25 is beyond EOD, truncated [ 927.904997][T17316] loop3: p3 start 4293001441 is beyond EOD, truncated [ 927.912268][T17316] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:17:08 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000e00ff45ac0000ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 928.008206][T17316] loop3: p1 p2 p3 p4 [ 928.012371][T17316] loop3: p1 start 851978 is beyond EOD, truncated [ 928.019062][T17316] loop3: p2 start 25 is beyond EOD, truncated [ 928.025197][T17316] loop3: p3 start 4293001441 is beyond EOD, truncated [ 928.032177][T17316] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 928.047347][ T113] usb 3-1: Using ep0 maxpacket: 16 [ 928.167369][ T113] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 928.178418][ T113] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 928.188992][ T113] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 928.189016][T17320] loop3: p1 p2 p3 p4 [ 928.202461][ T113] usb 3-1: New USB device found, idVendor=0e8f, idProduct=0003, bcdDevice= 0.00 12:17:08 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a001000ff45ac0000ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 928.206492][T17320] loop3: p1 start 917514 is beyond EOD, truncated [ 928.215479][ T113] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 928.221713][T17320] loop3: p2 start 25 is beyond EOD, truncated [ 928.230743][ T113] usb 3-1: config 0 descriptor?? [ 928.239389][T17320] loop3: p3 start 4293001441 is beyond EOD, truncated [ 928.247372][T17320] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:17:09 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="a3286fd2dfffbbbbbbbbbbbb8100000086dd60163dac0a008800fe9ea3a8399434861b000600000000000000"], 0x3a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) [ 928.381624][T17323] loop3: p1 p2 p3 p4 [ 928.385935][T17323] loop3: p1 start 1048586 is beyond EOD, truncated [ 928.392892][T17323] loop3: p2 start 25 is beyond EOD, truncated [ 928.401163][T17323] loop3: p3 start 4293001441 is beyond EOD, truncated [ 928.408353][T17323] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:17:09 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a001100ff45ac0000ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 928.487826][T17323] loop3: p1 p2 p3 p4 [ 928.492066][T17323] loop3: p1 start 1048586 is beyond EOD, truncated [ 928.499131][T17323] loop3: p2 start 25 is beyond EOD, truncated [ 928.505324][T17323] loop3: p3 start 4293001441 is beyond EOD, truncated [ 928.512662][T17323] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 928.577434][ T113] usbhid 3-1:0.0: can't add hid device: -71 [ 928.583487][ T113] usbhid: probe of 3-1:0.0 failed with error -71 [ 928.591248][ T113] usb 3-1: USB disconnect, device number 112 [ 928.648530][T17330] loop3: p1 p2 p3 p4 [ 928.652641][T17330] loop3: p1 start 1114122 is beyond EOD, truncated [ 928.659180][T17330] loop3: p2 start 25 is beyond EOD, truncated [ 928.665316][T17330] loop3: p3 start 4293001441 is beyond EOD, truncated [ 928.672417][T17330] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 928.682867][ T153] loop3: p1 p2 p3 p4 [ 928.687059][ T153] loop3: p1 start 1114122 is beyond EOD, truncated [ 928.693692][ T153] loop3: p2 start 25 is beyond EOD, truncated [ 928.699875][ T153] loop3: p3 start 4293001441 is beyond EOD, truncated [ 928.706694][ T153] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 929.047184][ T113] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 929.307294][ T113] usb 3-1: Using ep0 maxpacket: 16 [ 929.437238][ T113] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 929.448299][ T113] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 929.458265][ T113] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 929.471499][ T113] usb 3-1: New USB device found, idVendor=0e8f, idProduct=0003, bcdDevice= 0.00 [ 929.480557][ T113] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 929.490614][ T113] usb 3-1: config 0 descriptor?? [ 930.227167][ T113] usbhid 3-1:0.0: can't add hid device: -71 [ 930.233155][ T113] usbhid: probe of 3-1:0.0 failed with error -71 [ 930.241236][ T113] usb 3-1: USB disconnect, device number 113 12:17:11 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000640)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe8f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x20}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0xfffffffffffffd58, &(0x7f0000005380)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x1e, {[@main=@item_4={0x3, 0x0, 0x0, "269b771b"}, @global=@item_4={0x3, 0x1, 0x0, "bef90700"}, @main=@item_012={0x2, 0x0, 0x0, "aa7a"}, @main=@item_4={0x3, 0x0, 0x0, "5db5646d"}, @global=@item_4={0x3, 0x1, 0x0, "88fbd3e0"}, @local=@item_4={0x3, 0x2, 0x0, "9d360e65"}, @main=@item_012={0x1, 0x0, 0xa, '~'}]}}, 0x0}, 0x0) 12:17:11 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="a3286fd2dfffbbbbbbbbbbbb8100000086dd60163dac0a008800fe9ea3a8399434861b000600000000000000"], 0x3a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) 12:17:11 executing program 1: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000200)={0x0, 0x989680}, &(0x7f0000000100)) 12:17:11 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a001200ff45ac0000ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:17:11 executing program 4: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) dup(r2) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@private0={0xfc, 0x0, [], 0x1}, 0x6b}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x8) tkill(r0, 0x39) modify_ldt$read(0x0, &(0x7f0000000240)=""/220, 0xdc) ptrace$cont(0x9, r1, 0x0, 0x0) 12:17:11 executing program 0: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x80045432, &(0x7f0000000040)) ioctl$TIOCNOTTY(r0, 0x5422) r1 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r2, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x39) ptrace$cont(0x9, r2, 0x0, 0x0) [ 930.721069][T17347] loop3: p1 p2 p3 p4 [ 930.725288][T17347] loop3: p1 start 1179658 is beyond EOD, truncated [ 930.732085][T17347] loop3: p2 start 25 is beyond EOD, truncated [ 930.738215][T17347] loop3: p3 start 4293001441 is beyond EOD, truncated [ 930.744996][T17347] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:17:11 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a001300ff45ac0000ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:17:11 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a002200ff45ac0000ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 930.857711][T17361] loop3: p1 p2 p3 p4 [ 930.861939][T17361] loop3: p1 start 1245194 is beyond EOD, truncated [ 930.869147][T17361] loop3: p2 start 25 is beyond EOD, truncated [ 930.875222][T17361] loop3: p3 start 4293001441 is beyond EOD, truncated [ 930.882557][T17361] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 930.977110][ T113] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 930.997599][T17364] loop3: p1 p2 p3 p4 [ 931.001794][T17364] loop3: p1 start 2228234 is beyond EOD, truncated [ 931.008672][T17364] loop3: p2 start 25 is beyond EOD, truncated [ 931.014884][T17364] loop3: p3 start 4293001441 is beyond EOD, truncated 12:17:11 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a002400ff45ac0000ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 931.022013][T17364] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:17:11 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a002500ff45ac0000ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 931.127608][T17367] loop3: p1 p2 p3 p4 [ 931.131827][T17367] loop3: p1 start 2359306 is beyond EOD, truncated [ 931.138621][T17367] loop3: p2 start 25 is beyond EOD, truncated [ 931.144785][T17367] loop3: p3 start 4293001441 is beyond EOD, truncated [ 931.151716][T17367] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 931.227089][ T113] usb 3-1: Using ep0 maxpacket: 16 12:17:11 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a004800ff45ac0000ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 931.247748][T17370] loop3: p1 p2 p3 p4 [ 931.251937][T17370] loop3: p1 start 2424842 is beyond EOD, truncated [ 931.258771][T17370] loop3: p2 start 25 is beyond EOD, truncated [ 931.264875][T17370] loop3: p3 start 4293001441 is beyond EOD, truncated [ 931.272035][T17370] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 931.347143][ T113] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 931.358291][ T113] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 931.368245][ T113] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 931.381426][T17373] loop3: p1 p2 p3 p4 [ 931.385545][T17373] loop3: p1 start 4718602 is beyond EOD, truncated 12:17:12 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a004c00ff45ac0000ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 931.392070][T17373] loop3: p2 start 25 is beyond EOD, truncated [ 931.398183][T17373] loop3: p3 start 4293001441 is beyond EOD, truncated [ 931.404945][T17373] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 931.412114][ T113] usb 3-1: New USB device found, idVendor=0e8f, idProduct=0003, bcdDevice= 0.00 [ 931.421195][ T113] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 931.430053][ T113] usb 3-1: config 0 descriptor?? [ 931.687584][T17378] loop3: p1 p2 p3 p4 [ 931.691791][T17378] loop3: p1 start 4980746 is beyond EOD, truncated [ 931.698634][T17378] loop3: p2 start 25 is beyond EOD, truncated [ 931.704725][T17378] loop3: p3 start 4293001441 is beyond EOD, truncated [ 931.711534][T17378] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 931.767135][ T113] usbhid 3-1:0.0: can't add hid device: -71 [ 931.773153][ T113] usbhid: probe of 3-1:0.0 failed with error -71 [ 931.780659][ T113] usb 3-1: USB disconnect, device number 114 [ 932.237047][ T113] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 932.477058][ T113] usb 3-1: Using ep0 maxpacket: 16 [ 932.597102][ T113] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 932.608020][ T113] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 932.618549][ T113] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 932.631860][ T113] usb 3-1: New USB device found, idVendor=0e8f, idProduct=0003, bcdDevice= 0.00 [ 932.641453][ T113] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 932.650277][ T113] usb 3-1: config 0 descriptor?? [ 933.387017][ T113] usbhid 3-1:0.0: can't add hid device: -71 [ 933.393007][ T113] usbhid: probe of 3-1:0.0 failed with error -71 [ 933.400282][ T113] usb 3-1: USB disconnect, device number 115 12:17:14 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000640)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe8f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x20}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0xfffffffffffffd58, &(0x7f0000005380)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x1e, {[@main=@item_4={0x3, 0x0, 0x0, "269b771b"}, @global=@item_4={0x3, 0x1, 0x0, "bef90700"}, @main=@item_012={0x2, 0x0, 0x0, "aa7a"}, @main=@item_4={0x3, 0x0, 0x0, "5db5646d"}, @global=@item_4={0x3, 0x1, 0x0, "88fbd3e0"}, @local=@item_4={0x3, 0x2, 0x0, "9d360e65"}, @main=@item_012={0x1, 0x0, 0xa, '~'}]}}, 0x0}, 0x0) 12:17:14 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="a3286fd2dfffbbbbbbbbbbbb8100000086dd60163dac0a008800fe9ea3a8399434861b000600000000000000"], 0x3a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) 12:17:14 executing program 1: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000200)={0x0, 0x989680}, &(0x7f0000000100)) 12:17:14 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a006000ff45ac0000ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:17:14 executing program 4: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) dup(r2) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@private0={0xfc, 0x0, [], 0x1}, 0x6b}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x8) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:17:14 executing program 0: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x80045432, &(0x7f0000000040)) ioctl$TIOCNOTTY(r0, 0x5422) r1 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r2, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x39) ptrace$cont(0x9, r2, 0x0, 0x0) [ 933.877381][T17399] loop3: p1 p2 p3 p4 [ 933.881555][T17399] loop3: p1 start 6291466 is beyond EOD, truncated [ 933.889198][T17399] loop3: p2 start 25 is beyond EOD, truncated [ 933.895267][T17399] loop3: p3 start 4293001441 is beyond EOD, truncated [ 933.902046][T17399] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:17:14 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a006800ff45ac0000ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:17:14 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a006c00ff45ac0000ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 934.027461][T17408] loop3: p1 p2 p3 p4 [ 934.031559][T17408] loop3: p1 start 6815754 is beyond EOD, truncated [ 934.038147][T17408] loop3: p2 start 25 is beyond EOD, truncated [ 934.044201][T17408] loop3: p3 start 4293001441 is beyond EOD, truncated [ 934.050982][T17408] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 934.126957][T11066] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 934.148745][T17411] loop3: p1 p2 p3 p4 [ 934.153106][T17411] loop3: p1 start 7077898 is beyond EOD, truncated [ 934.160183][T17411] loop3: p2 start 25 is beyond EOD, truncated [ 934.166282][T17411] loop3: p3 start 4293001441 is beyond EOD, truncated [ 934.173512][T17411] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 934.218185][T17411] __loop_clr_fd: partition scan of loop3 failed (rc=-16) [ 934.267595][T17411] loop3: p1 p2 p3 p4 [ 934.271868][T17411] loop3: p1 start 7077898 is beyond EOD, truncated [ 934.279049][T17411] loop3: p2 start 25 is beyond EOD, truncated [ 934.285134][T17411] loop3: p3 start 4293001441 is beyond EOD, truncated [ 934.292456][T17411] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:17:15 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a007400ff45ac0000ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 934.396946][T11066] usb 3-1: Using ep0 maxpacket: 16 [ 934.427378][T17415] loop3: p1 p2 p3 p4 [ 934.431610][T17415] loop3: p1 start 7602186 is beyond EOD, truncated [ 934.438488][T17415] loop3: p2 start 25 is beyond EOD, truncated [ 934.444746][T17415] loop3: p3 start 4293001441 is beyond EOD, truncated [ 934.451673][T17415] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 934.517034][T11066] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 934.528003][T11066] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 934.537957][T11066] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 934.551086][T17415] loop3: p1 p2 p3 p4 [ 934.555230][T17415] loop3: p1 start 7602186 is beyond EOD, truncated 12:17:15 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a007a00ff45ac0000ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 934.561912][T17415] loop3: p2 start 25 is beyond EOD, truncated [ 934.568018][T17415] loop3: p3 start 4293001441 is beyond EOD, truncated [ 934.574786][T17415] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 934.581990][T11066] usb 3-1: New USB device found, idVendor=0e8f, idProduct=0003, bcdDevice= 0.00 [ 934.591057][T11066] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 934.600522][T11066] usb 3-1: config 0 descriptor?? 12:17:15 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="a3286fd2dfffbbbbbbbbbbbb8100000086dd60163dac0a008800fe9ea3a8399434861b000600"/51], 0x3a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) [ 934.697456][T17419] loop3: p1 p2 p3 p4 [ 934.703837][T17419] loop3: p1 start 7995402 is beyond EOD, truncated [ 934.713525][T17419] loop3: p2 start 25 is beyond EOD, truncated [ 934.720219][T17419] loop3: p3 start 4293001441 is beyond EOD, truncated [ 934.727537][T17419] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:17:15 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a009000ff45ac0000ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 934.818159][T17419] loop3: p1 p2 p3 p4 [ 934.822374][T17419] loop3: p1 start 7995402 is beyond EOD, truncated [ 934.829094][T17419] loop3: p2 start 25 is beyond EOD, truncated [ 934.835315][T17419] loop3: p3 start 4293001441 is beyond EOD, truncated [ 934.842220][T17419] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 934.851148][ T153] loop3: p1 p2 p3 p4 [ 934.856434][ T153] loop3: p1 start 7995402 is beyond EOD, truncated [ 934.863624][ T153] loop3: p2 start 25 is beyond EOD, truncated [ 934.870061][ T153] loop3: p3 start 4293001441 is beyond EOD, truncated [ 934.876861][ T153] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 934.961147][T11066] usbhid 3-1:0.0: can't add hid device: -71 [ 934.961373][T17426] loop3: p1 p2 p3 p4 [ 934.967146][T11066] usbhid: probe of 3-1:0.0 failed with error -71 [ 934.967977][T11066] usb 3-1: USB disconnect, device number 116 [ 934.971461][T17426] loop3: p1 start 9437194 is beyond EOD, truncated [ 934.991631][T17426] loop3: p2 start 25 is beyond EOD, truncated [ 934.997710][T17426] loop3: p3 start 4293001441 is beyond EOD, truncated [ 935.004459][T17426] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 935.097817][T17426] loop3: p1 p2 p3 p4 [ 935.101977][T17426] loop3: p1 start 9437194 is beyond EOD, truncated [ 935.108517][T17426] loop3: p2 start 25 is beyond EOD, truncated [ 935.114605][T17426] loop3: p3 start 4293001441 is beyond EOD, truncated [ 935.121394][T17426] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 935.177607][ T153] loop3: p1 p2 p3 p4 [ 935.181681][ T153] loop3: p1 start 9437194 is beyond EOD, truncated [ 935.188906][ T153] loop3: p2 start 25 is beyond EOD, truncated [ 935.195710][ T153] loop3: p3 start 4293001441 is beyond EOD, truncated [ 935.202918][ T153] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 935.426952][T11066] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 935.676902][T11066] usb 3-1: Using ep0 maxpacket: 16 [ 935.796978][T11066] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 935.807966][T11066] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 935.817828][T11066] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 935.830633][T11066] usb 3-1: New USB device found, idVendor=0e8f, idProduct=0003, bcdDevice= 0.00 [ 935.839722][T11066] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 935.848530][T11066] usb 3-1: config 0 descriptor?? [ 936.586876][T11066] usbhid 3-1:0.0: can't add hid device: -71 [ 936.592889][T11066] usbhid: probe of 3-1:0.0 failed with error -71 [ 936.600578][T11066] usb 3-1: USB disconnect, device number 117 12:17:17 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000640)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe8f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x20}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0xfffffffffffffd58, &(0x7f0000005380)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x1e, {[@main=@item_4={0x3, 0x0, 0x0, "269b771b"}, @global=@item_4={0x3, 0x1, 0x0, "bef90700"}, @main=@item_012={0x2, 0x0, 0x0, "aa7a"}, @main=@item_4={0x3, 0x0, 0x0, "5db5646d"}, @global=@item_4={0x3, 0x1, 0x0, "88fbd3e0"}, @local=@item_4={0x3, 0x2, 0x0, "9d360e65"}, @main=@item_012={0x1, 0x0, 0xa, '~'}]}}, 0x0}, 0x0) 12:17:17 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000402ff45ac0000ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:17:17 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="a3286fd2dfffbbbbbbbbbbbb8100000086dd60163dac0a008800fe9ea3a8399434861b000600"/51], 0x3a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) 12:17:17 executing program 4: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) dup(r1) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@private0={0xfc, 0x0, [], 0x1}, 0x6b}) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x8) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 12:17:17 executing program 1: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000200)={0x0, 0x989680}, &(0x7f0000000100)) 12:17:17 executing program 0: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x80045432, &(0x7f0000000040)) ioctl$TIOCNOTTY(r0, 0x5422) r1 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r2, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x39) ptrace$cont(0x9, r2, 0x0, 0x0) [ 937.090820][T17443] loop3: p1 p2 p3 p4 [ 937.095364][T17443] loop3: p1 start 33816586 is beyond EOD, truncated [ 937.102748][T17443] loop3: p2 start 25 is beyond EOD, truncated [ 937.109283][T17443] loop3: p3 start 4293001441 is beyond EOD, truncated [ 937.116061][T17443] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 937.207368][T17443] loop3: p1 p2 p3 p4 [ 937.211554][T17443] loop3: p1 start 33816586 is beyond EOD, truncated [ 937.218796][T17443] loop3: p2 start 25 is beyond EOD, truncated [ 937.225005][T17443] loop3: p3 start 4293001441 is beyond EOD, truncated [ 937.232334][T17443] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:17:17 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000003ff45ac0000ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 937.287577][ T153] loop3: p1 p2 p3 p4 [ 937.292881][ T153] loop3: p1 start 33816586 is beyond EOD, truncated [ 937.299740][ T153] loop3: p2 start 25 is beyond EOD, truncated [ 937.305798][ T153] loop3: p3 start 4293001441 is beyond EOD, truncated [ 937.312578][ T153] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 937.319751][ T113] usb 3-1: new high-speed USB device number 118 using dummy_hcd 12:17:18 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000204ff45ac0000ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 937.427341][T17459] loop3: p1 p2 p3 p4 [ 937.432514][T17459] loop3: p1 start 50331658 is beyond EOD, truncated [ 937.440034][T17459] loop3: p2 start 25 is beyond EOD, truncated [ 937.446157][T17459] loop3: p3 start 4293001441 is beyond EOD, truncated [ 937.452974][T17459] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 937.528654][T17462] loop3: p1 p2 p3 p4 [ 937.532800][T17462] loop3: p1 start 67239946 is beyond EOD, truncated [ 937.539637][T17462] loop3: p2 start 25 is beyond EOD, truncated [ 937.545769][T17462] loop3: p3 start 4293001441 is beyond EOD, truncated [ 937.552620][T17462] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 937.566856][ T113] usb 3-1: Using ep0 maxpacket: 16 [ 937.647357][T17462] loop3: p1 p2 p3 p4 [ 937.651563][T17462] loop3: p1 start 67239946 is beyond EOD, truncated [ 937.658891][T17462] loop3: p2 start 25 is beyond EOD, truncated [ 937.664967][T17462] loop3: p3 start 4293001441 is beyond EOD, truncated [ 937.672189][T17462] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 937.686887][ T113] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 12:17:18 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000604ff45ac0000ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 937.697840][ T113] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 937.707805][ T113] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 937.723308][ T113] usb 3-1: New USB device found, idVendor=0e8f, idProduct=0003, bcdDevice= 0.00 [ 937.732383][ T113] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 937.741015][ T113] usb 3-1: config 0 descriptor?? 12:17:18 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a008004ff45ac0000ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 937.838061][T17467] loop3: p1 p2 p3 p4 [ 937.843043][T17467] loop3: p1 start 67502090 is beyond EOD, truncated [ 937.849931][T17467] loop3: p2 start 25 is beyond EOD, truncated [ 937.856166][T17467] loop3: p3 start 4293001441 is beyond EOD, truncated [ 937.863048][T17467] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:17:18 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="a3286fd2dfffbbbbbbbbbbbb8100000086dd60163dac0a008800fe9ea3a8399434861b000600"/51], 0x3a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) [ 937.982653][T17470] loop3: p1 p2 p3 p4 [ 937.988490][T17470] loop3: p1 start 75497482 is beyond EOD, truncated [ 937.995183][T17470] loop3: p2 start 25 is beyond EOD, truncated [ 938.002070][T17470] loop3: p3 start 4293001441 is beyond EOD, truncated [ 938.009308][T17470] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 938.076814][ T113] usbhid 3-1:0.0: can't add hid device: -71 [ 938.082874][ T113] usbhid: probe of 3-1:0.0 failed with error -71 [ 938.090324][ T113] usb 3-1: USB disconnect, device number 118 [ 938.107084][T17470] loop3: p1 p2 p3 p4 [ 938.111380][T17470] loop3: p1 start 75497482 is beyond EOD, truncated [ 938.118105][T17470] loop3: p2 start 25 is beyond EOD, truncated 12:17:18 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a00f504ff45ac0000ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 938.124206][T17470] loop3: p3 start 4293001441 is beyond EOD, truncated [ 938.131031][T17470] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 938.277303][T17478] loop3: p1 p2 p3 p4 [ 938.281504][T17478] loop3: p1 start 83165194 is beyond EOD, truncated [ 938.288676][T17478] loop3: p2 start 25 is beyond EOD, truncated [ 938.294839][T17478] loop3: p3 start 4293001441 is beyond EOD, truncated [ 938.302193][T17478] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 938.546752][ T113] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 938.789335][ T113] usb 3-1: Using ep0 maxpacket: 16 [ 938.906837][ T113] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 938.918035][ T113] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 938.928050][ T113] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 938.944078][ T113] usb 3-1: New USB device found, idVendor=0e8f, idProduct=0003, bcdDevice= 0.00 [ 938.953149][ T113] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 938.961829][ T113] usb 3-1: config 0 descriptor?? [ 939.706730][ T113] usbhid 3-1:0.0: can't add hid device: -71 [ 939.712770][ T113] usbhid: probe of 3-1:0.0 failed with error -71 [ 939.720842][ T113] usb 3-1: USB disconnect, device number 119 12:17:20 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000640)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe8f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x20}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0xfffffffffffffd58, &(0x7f0000005380)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x1f, {[@main=@item_4={0x3, 0x0, 0x0, "269b771b"}, @global=@item_4={0x3, 0x1, 0x0, "bef90700"}, @main=@item_012={0x2, 0x0, 0x0, "aa7a"}, @main=@item_4={0x3, 0x0, 0x0, "5db5646d"}, @global=@item_4={0x3, 0x1, 0x0, "88fbd3e0"}, @local=@item_4={0x3, 0x2, 0x0, "9d360e65"}, @main, @main=@item_012={0x1, 0x0, 0xa, '~'}]}}, 0x0}, 0x0) 12:17:20 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000005ff45ac0000ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:17:20 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="a3286fd2dfffbbbbbbbbbbbb8100000086dd60163dac0a008800fe9ea3a8399434861b000600"/55], 0x3a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) 12:17:20 executing program 4: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) dup(r1) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@private0={0xfc, 0x0, [], 0x1}, 0x6b}) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x8) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 12:17:20 executing program 1: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, 0x0, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000200)={0x0, 0x989680}, &(0x7f0000000100)) 12:17:20 executing program 0: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x80045432, &(0x7f0000000040)) ioctl$TIOCNOTTY(r0, 0x5422) gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:17:20 executing program 1: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, 0x0, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000200)={0x0, 0x989680}, &(0x7f0000000100)) 12:17:20 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000006ff45ac0000ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:17:20 executing program 1: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, 0x0, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000200)={0x0, 0x989680}, &(0x7f0000000100)) [ 940.209388][T17494] loop3: p1 p2 p3 p4 [ 940.213500][T17494] loop3: p1 start 83886090 is beyond EOD, truncated [ 940.227272][T17494] loop3: p2 start 25 is beyond EOD, truncated [ 940.233638][T17494] loop3: p3 start 4293001441 is beyond EOD, truncated [ 940.240812][T17494] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:17:21 executing program 1: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000), &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000200)={0x0, 0x989680}, &(0x7f0000000100)) [ 940.360516][T17512] loop3: p1 p2 p3 p4 [ 940.364762][T17512] loop3: p1 start 100663306 is beyond EOD, truncated [ 940.372096][T17512] loop3: p2 start 25 is beyond EOD, truncated [ 940.378450][T17512] loop3: p3 start 4293001441 is beyond EOD, truncated [ 940.385274][T17512] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:17:21 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000406ff45ac0000ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 940.436685][ T113] usb 3-1: new high-speed USB device number 120 using dummy_hcd 12:17:21 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000007ff45ac0000ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 940.487813][T17518] loop3: p1 p2 p3 p4 [ 940.491992][T17518] loop3: p1 start 100925450 is beyond EOD, truncated [ 940.499379][T17518] loop3: p2 start 25 is beyond EOD, truncated [ 940.505538][T17518] loop3: p3 start 4293001441 is beyond EOD, truncated [ 940.512853][T17518] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 940.616999][T17521] loop3: p1 p2 p3 p4 [ 940.622334][T17521] loop3: p1 start 117440522 is beyond EOD, truncated [ 940.629525][T17521] loop3: p2 start 25 is beyond EOD, truncated [ 940.635668][T17521] loop3: p3 start 4293001441 is beyond EOD, truncated [ 940.642997][T17521] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 940.676703][ T113] usb 3-1: Using ep0 maxpacket: 16 [ 940.796793][ T113] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 940.807745][ T113] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 940.818099][ T113] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 940.831481][ T113] usb 3-1: New USB device found, idVendor=0e8f, idProduct=0003, bcdDevice= 0.00 [ 940.840934][ T113] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 940.849922][ T113] usb 3-1: config 0 descriptor?? [ 941.186679][ T113] usbhid 3-1:0.0: can't add hid device: -71 [ 941.192688][ T113] usbhid: probe of 3-1:0.0 failed with error -71 [ 941.200899][ T113] usb 3-1: USB disconnect, device number 120 [ 941.656638][ T113] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 941.896583][ T113] usb 3-1: Using ep0 maxpacket: 16 [ 942.016705][ T113] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 942.027622][ T113] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 942.037367][ T113] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 942.050189][ T113] usb 3-1: New USB device found, idVendor=0e8f, idProduct=0003, bcdDevice= 0.00 [ 942.059220][ T113] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 942.067868][ T113] usb 3-1: config 0 descriptor?? [ 942.806634][ T113] usbhid 3-1:0.0: can't add hid device: -71 [ 942.812747][ T113] usbhid: probe of 3-1:0.0 failed with error -71 [ 942.820856][ T113] usb 3-1: USB disconnect, device number 121 12:17:23 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000640)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe8f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x20}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0xfffffffffffffd58, &(0x7f0000005380)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x1f, {[@main=@item_4={0x3, 0x0, 0x0, "269b771b"}, @global=@item_4={0x3, 0x1, 0x0, "bef90700"}, @main=@item_012={0x2, 0x0, 0x0, "aa7a"}, @main=@item_4={0x3, 0x0, 0x0, "5db5646d"}, @global=@item_4={0x3, 0x1, 0x0, "88fbd3e0"}, @local=@item_4={0x3, 0x2, 0x0, "9d360e65"}, @main, @main=@item_012={0x1, 0x0, 0xa, '~'}]}}, 0x0}, 0x0) 12:17:23 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000009ff45ac0000ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:17:23 executing program 1: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000), &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000200)={0x0, 0x989680}, &(0x7f0000000100)) 12:17:23 executing program 4: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) dup(r1) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@private0={0xfc, 0x0, [], 0x1}, 0x6b}) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x8) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 12:17:23 executing program 0: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x80045432, &(0x7f0000000040)) ioctl$TIOCNOTTY(r0, 0x5422) gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:17:23 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="a3286fd2dfffbbbbbbbbbbbb8100000086dd60163dac0a008800fe9ea3a8399434861b000600"/55], 0x3a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) 12:17:24 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a00000aff45ac0000ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 943.297214][T17544] loop3: p1 p2 p3 p4 [ 943.301377][T17544] loop3: p1 start 150994954 is beyond EOD, truncated [ 943.308322][T17544] loop3: p2 start 25 is beyond EOD, truncated [ 943.314404][T17544] loop3: p3 start 4293001441 is beyond EOD, truncated [ 943.321403][T17544] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:17:24 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a00000bff45ac0000ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 943.417182][T17556] loop3: p1 p2 p3 p4 [ 943.421385][T17556] loop3: p1 start 167772170 is beyond EOD, truncated [ 943.428752][T17556] loop3: p2 start 25 is beyond EOD, truncated [ 943.434903][T17556] loop3: p3 start 4293001441 is beyond EOD, truncated [ 943.442173][T17556] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 943.536524][T11066] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 943.547518][T17559] loop3: p1 p2 p3 p4 [ 943.551663][T17559] loop3: p1 start 184549386 is beyond EOD, truncated [ 943.558719][T17559] loop3: p2 start 25 is beyond EOD, truncated [ 943.564838][T17559] loop3: p3 start 4293001441 is beyond EOD, truncated [ 943.572107][T17559] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:17:24 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a00000cff45ac0000ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 943.666954][T17559] loop3: p1 p2 p3 p4 [ 943.671180][T17559] loop3: p1 start 184549386 is beyond EOD, truncated [ 943.678428][T17559] loop3: p2 start 25 is beyond EOD, truncated [ 943.684585][T17559] loop3: p3 start 4293001441 is beyond EOD, truncated [ 943.691848][T17559] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 943.796659][T11066] usb 3-1: Using ep0 maxpacket: 16 12:17:24 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a00000dff45ac0000ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 943.817146][T17563] loop3: p1 p2 p3 p4 [ 943.821331][T17563] loop3: p1 start 201326602 is beyond EOD, truncated [ 943.828740][T17563] loop3: p2 start 25 is beyond EOD, truncated [ 943.834880][T17563] loop3: p3 start 4293001441 is beyond EOD, truncated [ 943.842194][T17563] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 943.926571][T11066] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 943.937800][T11066] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 943.940449][T17566] loop3: p1 p2 p3 p4 [ 943.948471][T11066] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 943.952185][T17566] loop3: p1 start 218103818 is beyond EOD, truncated [ 943.965120][T11066] usb 3-1: New USB device found, idVendor=0e8f, idProduct=0003, bcdDevice= 0.00 [ 943.971455][T17566] loop3: p2 start 25 is beyond EOD, truncated [ 943.980765][T11066] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 943.986642][T17566] loop3: p3 start 4293001441 is beyond EOD, truncated [ 943.995833][T11066] usb 3-1: config 0 descriptor?? [ 944.001850][T17566] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:17:24 executing program 1: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000), &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000200)={0x0, 0x989680}, &(0x7f0000000100)) 12:17:24 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="a3286fd2dfffbbbbbbbbbbbb8100000086dd60163dac0a008800fe9ea3a8399434861b000600"/55], 0x3a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) [ 944.124235][T17566] loop3: p1 p2 p3 p4 [ 944.128571][T17566] loop3: p1 start 218103818 is beyond EOD, truncated [ 944.137250][T17566] loop3: p2 start 25 is beyond EOD, truncated [ 944.143559][T17566] loop3: p3 start 4293001441 is beyond EOD, truncated [ 944.151036][T17566] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 944.197248][ T153] loop3: p1 p2 p3 p4 [ 944.201378][ T153] loop3: p1 start 218103818 is beyond EOD, truncated [ 944.212157][ T153] loop3: p2 start 25 is beyond EOD, truncated [ 944.218902][ T153] loop3: p3 start 4293001441 is beyond EOD, truncated [ 944.225677][ T153] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 944.386518][T11066] usbhid 3-1:0.0: can't add hid device: -71 [ 944.392634][T11066] usbhid: probe of 3-1:0.0 failed with error -71 [ 944.400859][T11066] usb 3-1: USB disconnect, device number 122 [ 944.816448][T11066] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 945.056504][T11066] usb 3-1: Using ep0 maxpacket: 16 [ 945.176492][T11066] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 945.187595][T11066] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 945.197343][T11066] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 945.210148][T11066] usb 3-1: New USB device found, idVendor=0e8f, idProduct=0003, bcdDevice= 0.00 [ 945.219550][T11066] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 945.228319][T11066] usb 3-1: config 0 descriptor?? [ 945.966442][T11066] usbhid 3-1:0.0: can't add hid device: -71 [ 945.972436][T11066] usbhid: probe of 3-1:0.0 failed with error -71 [ 945.980494][T11066] usb 3-1: USB disconnect, device number 123 12:17:27 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000640)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe8f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x20}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0xfffffffffffffd58, &(0x7f0000005380)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x1f, {[@main=@item_4={0x3, 0x0, 0x0, "269b771b"}, @global=@item_4={0x3, 0x1, 0x0, "bef90700"}, @main=@item_012={0x2, 0x0, 0x0, "aa7a"}, @main=@item_4={0x3, 0x0, 0x0, "5db5646d"}, @global=@item_4={0x3, 0x1, 0x0, "88fbd3e0"}, @local=@item_4={0x3, 0x2, 0x0, "9d360e65"}, @main, @main=@item_012={0x1, 0x0, 0xa, '~'}]}}, 0x0}, 0x0) 12:17:27 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a00000eff45ac0000ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:17:27 executing program 1: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000200)={0x0, 0x989680}, &(0x7f0000000100)) 12:17:27 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="a3286fd2dfffbbbbbbbbbbbb8100000086dd60163dac0a008800fe9ea3a8399434861b000600"/57], 0x3a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) 12:17:27 executing program 0: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x80045432, &(0x7f0000000040)) ioctl$TIOCNOTTY(r0, 0x5422) gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:17:27 executing program 4: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) dup(r2) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@private0={0xfc, 0x0, [], 0x1}, 0x6b}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:17:27 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000011ff45ac0000ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 946.469392][T17595] loop3: p1 p2 p3 p4 [ 946.473664][T17595] loop3: p1 start 234881034 is beyond EOD, truncated [ 946.480929][T17595] loop3: p2 start 25 is beyond EOD, truncated [ 946.487302][T17595] loop3: p3 start 4293001441 is beyond EOD, truncated [ 946.494115][T17595] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:17:27 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000012ff45ac0000ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 946.587452][T17604] loop3: p1 p2 p3 p4 [ 946.592455][T17604] loop3: p1 start 285212682 is beyond EOD, truncated [ 946.599727][T17604] loop3: p2 start 25 is beyond EOD, truncated [ 946.605855][T17604] loop3: p3 start 4293001441 is beyond EOD, truncated [ 946.613152][T17604] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 946.696466][ T113] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 946.726801][T17608] loop3: p1 p2 p3 p4 [ 946.731067][T17608] loop3: p1 start 301989898 is beyond EOD, truncated [ 946.738555][T17608] loop3: p2 start 25 is beyond EOD, truncated 12:17:27 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000013ff45ac0000ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 946.744677][T17608] loop3: p3 start 4293001441 is beyond EOD, truncated [ 946.752050][T17608] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:17:27 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a00001fff45ac0000ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 946.847279][T17611] loop3: p1 p2 p3 p4 [ 946.851512][T17611] loop3: p1 start 318767114 is beyond EOD, truncated [ 946.858724][T17611] loop3: p2 start 25 is beyond EOD, truncated [ 946.864955][T17611] loop3: p3 start 4293001441 is beyond EOD, truncated [ 946.872412][T17611] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 946.936362][ T113] usb 3-1: Using ep0 maxpacket: 16 [ 946.968812][T17614] loop3: p1 p2 p3 p4 [ 946.972978][T17614] loop3: p1 start 520093706 is beyond EOD, truncated [ 946.980280][T17614] loop3: p2 start 25 is beyond EOD, truncated [ 946.986735][T17614] loop3: p3 start 4293001441 is beyond EOD, truncated [ 946.993509][T17614] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 947.005884][ T153] loop3: p1 p2 p3 p4 [ 947.010355][ T153] loop3: p1 start 520093706 is beyond EOD, truncated [ 947.017385][ T153] loop3: p2 start 25 is beyond EOD, truncated [ 947.023459][ T153] loop3: p3 start 4293001441 is beyond EOD, truncated [ 947.030714][ T153] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 947.056452][ T113] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 12:17:27 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000020ff45ac0000ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 947.067544][ T113] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 947.077550][ T113] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 947.093283][ T113] usb 3-1: New USB device found, idVendor=0e8f, idProduct=0003, bcdDevice= 0.00 [ 947.104838][ T113] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 947.114148][ T113] usb 3-1: config 0 descriptor?? 12:17:27 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000022ff45ac0000ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 947.127462][T17617] loop3: p1 p2 p3 p4 [ 947.131617][T17617] loop3: p1 start 536870922 is beyond EOD, truncated [ 947.138632][T17617] loop3: p2 start 25 is beyond EOD, truncated [ 947.144735][T17617] loop3: p3 start 4293001441 is beyond EOD, truncated [ 947.152044][T17617] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 947.278013][T17621] loop3: p1 p2 p3 p4 [ 947.282232][T17621] loop3: p1 start 570425354 is beyond EOD, truncated [ 947.289281][T17621] loop3: p2 start 25 is beyond EOD, truncated [ 947.295464][T17621] loop3: p3 start 4293001441 is beyond EOD, truncated [ 947.302635][T17621] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 947.388007][T17621] loop3: p1 p2 p3 p4 [ 947.392123][T17621] loop3: p1 start 570425354 is beyond EOD, truncated [ 947.398880][T17621] loop3: p2 start 25 is beyond EOD, truncated [ 947.404953][T17621] loop3: p3 start 4293001441 is beyond EOD, truncated [ 947.411728][T17621] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 947.456423][ T113] usbhid 3-1:0.0: can't add hid device: -71 [ 947.462483][ T113] usbhid: probe of 3-1:0.0 failed with error -71 [ 947.471189][ T113] usb 3-1: USB disconnect, device number 124 [ 947.497087][ T153] loop3: p1 p2 p3 p4 [ 947.501275][ T153] loop3: p1 start 570425354 is beyond EOD, truncated [ 947.508428][ T153] loop3: p2 start 25 is beyond EOD, truncated [ 947.514486][ T153] loop3: p3 start 4293001441 is beyond EOD, truncated [ 947.521620][ T153] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 947.926346][ T113] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 948.166292][ T113] usb 3-1: Using ep0 maxpacket: 16 [ 948.286347][ T113] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 948.297278][ T113] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 948.307609][ T113] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 948.320770][ T113] usb 3-1: New USB device found, idVendor=0e8f, idProduct=0003, bcdDevice= 0.00 [ 948.330138][ T113] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 948.339000][ T113] usb 3-1: config 0 descriptor?? [ 949.076302][ T113] usbhid 3-1:0.0: can't add hid device: -71 [ 949.082326][ T113] usbhid: probe of 3-1:0.0 failed with error -71 [ 949.090372][ T113] usb 3-1: USB disconnect, device number 125 12:17:30 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000640)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe8f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x20}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0xfffffffffffffd58, &(0x7f0000005380)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x1b, {[@main=@item_4={0x3, 0x0, 0x0, "269b771b"}, @global=@item_4={0x3, 0x1, 0x0, "bef90700"}, @main=@item_012={0x2, 0x0, 0x0, "aa7a"}, @main=@item_4={0x3, 0x0, 0x0, "5db5646d"}, @global=@item_4={0x3, 0x1, 0x0, "88fbd3e0"}, @main=@item_012={0x1, 0x0, 0x0, "a7"}, @main=@item_012={0x1, 0x0, 0xa, '~'}]}}, 0x0}, 0x0) 12:17:30 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="a3286fd2dfffbbbbbbbbbbbb8100000086dd60163dac0a008800fe9ea3a8399434861b000600"/57], 0x3a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) 12:17:30 executing program 1: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000200)={0x0, 0x989680}, &(0x7f0000000100)) 12:17:30 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000024ff45ac0000ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:17:30 executing program 4: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) dup(r2) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@private0={0xfc, 0x0, [], 0x1}, 0x6b}) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:17:30 executing program 0: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x80045432, &(0x7f0000000040)) ioctl$TIOCNOTTY(r0, 0x5422) r1 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r1, 0x39) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r2, 0x0, 0x0) [ 949.596654][T17642] loop3: p1 p2 p3 p4 [ 949.600848][T17642] loop3: p1 start 603979786 is beyond EOD, truncated [ 949.610334][T17642] loop3: p2 start 25 is beyond EOD, truncated [ 949.616712][T17642] loop3: p3 start 4293001441 is beyond EOD, truncated [ 949.623501][T17642] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 949.707935][T17642] loop3: p1 p2 p3 p4 [ 949.712136][T17642] loop3: p1 start 603979786 is beyond EOD, truncated [ 949.719154][T17642] loop3: p2 start 25 is beyond EOD, truncated [ 949.725305][T17642] loop3: p3 start 4293001441 is beyond EOD, truncated [ 949.732357][T17642] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:17:30 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000025ff45ac0000ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 949.786833][ T153] loop3: p1 p2 p3 p4 [ 949.791007][ T153] loop3: p1 start 603979786 is beyond EOD, truncated [ 949.798010][ T153] loop3: p2 start 25 is beyond EOD, truncated [ 949.804121][ T153] loop3: p3 start 4293001441 is beyond EOD, truncated [ 949.806228][ T113] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 949.811172][ T153] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 949.936957][T17652] loop3: p1 p2 p3 p4 [ 949.941121][T17652] loop3: p1 start 620757002 is beyond EOD, truncated [ 949.947911][T17652] loop3: p2 start 25 is beyond EOD, truncated [ 949.954044][T17652] loop3: p3 start 4293001441 is beyond EOD, truncated [ 949.960907][T17652] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:17:30 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a00b926ff45ac0000ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 950.056287][ T113] usb 3-1: Using ep0 maxpacket: 16 12:17:30 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a00003fff45ac0000ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 950.076744][T17655] loop3: p1 p2 p3 p4 [ 950.086364][T17655] loop3: p1 start 649658378 is beyond EOD, truncated [ 950.093217][T17655] loop3: p2 start 25 is beyond EOD, truncated [ 950.100008][T17655] loop3: p3 start 4293001441 is beyond EOD, truncated [ 950.107999][T17655] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 950.176637][ T113] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 950.191882][ T113] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 950.204888][ T113] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 950.218151][ T113] usb 3-1: New USB device found, idVendor=0e8f, idProduct=0003, bcdDevice= 0.00 [ 950.227511][ T113] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 950.236076][ T113] usb 3-1: config 0 descriptor?? [ 950.238799][T17658] loop3: p1 p2 p3 p4 [ 950.246969][T17658] loop3: p1 start 1056964618 is beyond EOD, truncated [ 950.253960][T17658] loop3: p2 start 25 is beyond EOD, truncated [ 950.260350][T17658] loop3: p3 start 4293001441 is beyond EOD, truncated [ 950.267329][T17658] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:17:31 executing program 1: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000200)={0x0, 0x989680}, &(0x7f0000000100)) 12:17:31 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="a3286fd2dfffbbbbbbbbbbbb8100000086dd60163dac0a008800fe9ea3a8399434861b000600"/57], 0x3a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) 12:17:31 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000040ff45ac0000ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 950.361628][T17658] loop3: p1 p2 p3 p4 [ 950.365824][T17658] loop3: p1 start 1056964618 is beyond EOD, truncated [ 950.374261][T17658] loop3: p2 start 25 is beyond EOD, truncated [ 950.380757][T17658] loop3: p3 start 4293001441 is beyond EOD, truncated [ 950.388081][T17658] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 950.536891][T17671] loop3: p1 p2 p3 p4 [ 950.541126][T17671] loop3: p1 start 1073741834 is beyond EOD, truncated [ 950.548486][T17671] loop3: p2 start 25 is beyond EOD, truncated [ 950.554653][T17671] loop3: p3 start 4293001441 is beyond EOD, truncated [ 950.562012][T17671] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 950.576232][ T113] usbhid 3-1:0.0: can't add hid device: -71 [ 950.583231][ T113] usbhid: probe of 3-1:0.0 failed with error -71 [ 950.591400][ T113] usb 3-1: USB disconnect, device number 126 [ 951.046163][ T113] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 951.286186][ T113] usb 3-1: Using ep0 maxpacket: 16 [ 951.406228][ T113] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 951.417246][ T113] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 951.427341][ T113] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 951.440425][ T113] usb 3-1: New USB device found, idVendor=0e8f, idProduct=0003, bcdDevice= 0.00 [ 951.449492][ T113] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 951.458063][ T113] usb 3-1: config 0 descriptor?? [ 952.196151][ T113] usbhid 3-1:0.0: can't add hid device: -71 [ 952.202366][ T113] usbhid: probe of 3-1:0.0 failed with error -71 [ 952.210485][ T113] usb 3-1: USB disconnect, device number 127 12:17:33 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000640)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe8f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x20}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0xfffffffffffffd58, &(0x7f0000005380)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x1b, {[@main=@item_4={0x3, 0x0, 0x0, "269b771b"}, @global=@item_4={0x3, 0x1, 0x0, "bef90700"}, @main=@item_012={0x2, 0x0, 0x0, "aa7a"}, @main=@item_4={0x3, 0x0, 0x0, "5db5646d"}, @global=@item_4={0x3, 0x1, 0x0, "88fbd3e0"}, @main=@item_012={0x1, 0x0, 0x0, "a7"}, @main=@item_012={0x1, 0x0, 0xa, '~'}]}}, 0x0}, 0x0) 12:17:33 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000048ff45ac0000ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:17:33 executing program 1: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000200)={0x0, 0x989680}, &(0x7f0000000100)) 12:17:33 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="a3286fd2dfffbbbbbbbbbbbb8100000086dd60163dac0a008800fe9ea3a8399434861b0006000000000000000000000000000000000000000001"], 0x3a) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r1, 0x0, 0x18100, 0x0) 12:17:33 executing program 4: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) dup(r2) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@private0={0xfc, 0x0, [], 0x1}, 0x6b}) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:17:33 executing program 0: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x80045432, &(0x7f0000000040)) ioctl$TIOCNOTTY(r0, 0x5422) r1 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r1, 0x39) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r2, 0x0, 0x0) 12:17:33 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a00004cff45ac0000ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 952.686589][T17687] loop3: p1 p2 p3 p4 [ 952.690859][T17687] loop3: p1 start 1207959562 is beyond EOD, truncated [ 952.698116][T17687] loop3: p2 start 25 is beyond EOD, truncated [ 952.704253][T17687] loop3: p3 start 4293001441 is beyond EOD, truncated [ 952.711094][T17687] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:17:33 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000060ff45ac0000ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 952.816603][T17701] loop3: p1 p2 p3 p4 [ 952.820752][T17701] loop3: p1 start 1275068426 is beyond EOD, truncated [ 952.828051][T17701] loop3: p2 start 25 is beyond EOD, truncated [ 952.834123][T17701] loop3: p3 start 4293001441 is beyond EOD, truncated [ 952.841326][T17701] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 952.916137][ T113] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 952.928257][T17704] loop3: p1 p2 p3 p4 [ 952.932485][T17704] loop3: p1 start 1610612746 is beyond EOD, truncated [ 952.939516][T17704] loop3: p2 start 25 is beyond EOD, truncated [ 952.945624][T17704] loop3: p3 start 4293001441 is beyond EOD, truncated [ 952.952409][T17704] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 953.046465][T17704] loop3: p1 p2 p3 p4 [ 953.050661][T17704] loop3: p1 start 1610612746 is beyond EOD, truncated [ 953.057969][T17704] loop3: p2 start 25 is beyond EOD, truncated [ 953.064028][T17704] loop3: p3 start 4293001441 is beyond EOD, truncated [ 953.070908][T17704] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:17:33 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000068ff45ac0000ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 953.156070][ T113] usb 3-1: Using ep0 maxpacket: 16 [ 953.258214][T17708] loop3: p1 p2 p3 p4 [ 953.262519][T17708] loop3: p1 start 1744830474 is beyond EOD, truncated [ 953.269593][T17708] loop3: p2 start 25 is beyond EOD, truncated [ 953.275709][T17708] loop3: p3 start 4293001441 is beyond EOD, truncated [ 953.282610][ T113] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 953.287881][T17708] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 953.293598][ T113] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 953.310387][ T113] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 953.323642][ T113] usb 3-1: New USB device found, idVendor=0e8f, idProduct=0003, bcdDevice= 0.00 [ 953.333041][ T113] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 953.341911][ T113] usb 3-1: config 0 descriptor?? 12:17:34 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a00006cff45ac0000ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:17:34 executing program 1: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000200)={0x0, 0x989680}, &(0x7f0000000100)) [ 953.406657][T17708] loop3: p1 p2 p3 p4 [ 953.411035][T17708] loop3: p1 start 1744830474 is beyond EOD, truncated [ 953.418188][T17708] loop3: p2 start 25 is beyond EOD, truncated [ 953.424370][T17708] loop3: p3 start 4293001441 is beyond EOD, truncated [ 953.431408][T17708] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:17:34 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="a3286fd2dfffbbbbbbbbbbbb8100000086dd60163dac0a008800fe9ea3a8399434861b0006000000000000000000000000000000000000000001"], 0x3a) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r1, 0x0, 0x18100, 0x0) [ 953.596916][T17714] loop3: p1 p2 p3 p4 [ 953.601152][T17714] loop3: p1 start 1811939338 is beyond EOD, truncated [ 953.608884][T17714] loop3: p2 start 25 is beyond EOD, truncated [ 953.615061][T17714] loop3: p3 start 4293001441 is beyond EOD, truncated [ 953.622035][T17714] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 953.686106][ T113] usbhid 3-1:0.0: can't add hid device: -71 [ 953.692481][ T113] usbhid: probe of 3-1:0.0 failed with error -71 [ 953.700980][ T113] usb 3-1: USB disconnect, device number 2 [ 953.726777][T17714] loop3: p1 p2 p3 p4 [ 953.731453][T17714] loop3: p1 start 1811939338 is beyond EOD, truncated [ 953.738564][T17714] loop3: p2 start 25 is beyond EOD, truncated [ 953.745065][T17714] loop3: p3 start 4293001441 is beyond EOD, truncated [ 953.752539][T17714] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 953.856892][ T153] loop3: p1 p2 p3 p4 [ 953.861433][ T153] loop3: p1 start 1811939338 is beyond EOD, truncated [ 953.868703][ T153] loop3: p2 start 25 is beyond EOD, truncated [ 953.874810][ T153] loop3: p3 start 4293001441 is beyond EOD, truncated [ 953.882073][ T153] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 954.156048][ T113] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 954.396089][ T113] usb 3-1: Using ep0 maxpacket: 16 [ 954.526101][ T113] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 954.537689][ T113] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 954.548558][ T113] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 954.562571][ T113] usb 3-1: New USB device found, idVendor=0e8f, idProduct=0003, bcdDevice= 0.00 [ 954.572170][ T113] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 954.581362][ T113] usb 3-1: config 0 descriptor?? [ 955.356015][ T113] usbhid 3-1:0.0: can't add hid device: -71 [ 955.362007][ T113] usbhid: probe of 3-1:0.0 failed with error -71 [ 955.370342][ T113] usb 3-1: USB disconnect, device number 3 12:17:36 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000640)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe8f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x20}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0xfffffffffffffd58, &(0x7f0000005380)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x1b, {[@main=@item_4={0x3, 0x0, 0x0, "269b771b"}, @global=@item_4={0x3, 0x1, 0x0, "bef90700"}, @main=@item_012={0x2, 0x0, 0x0, "aa7a"}, @main=@item_4={0x3, 0x0, 0x0, "5db5646d"}, @global=@item_4={0x3, 0x1, 0x0, "88fbd3e0"}, @main=@item_012={0x1, 0x0, 0x0, "a7"}, @main=@item_012={0x1, 0x0, 0xa, '~'}]}}, 0x0}, 0x0) 12:17:36 executing program 1: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000200)={0x0, 0x989680}, &(0x7f0000000100)) 12:17:36 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="a3286fd2dfffbbbbbbbbbbbb8100000086dd60163dac0a008800fe9ea3a8399434861b0006000000000000000000000000000000000000000001"], 0x3a) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r1, 0x0, 0x18100, 0x0) 12:17:36 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000074ff45ac0000ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:17:36 executing program 4: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) dup(r2) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@private0={0xfc, 0x0, [], 0x1}, 0x6b}) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:17:36 executing program 0: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x80045432, &(0x7f0000000040)) ioctl$TIOCNOTTY(r0, 0x5422) r1 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r1, 0x39) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r2, 0x0, 0x0) 12:17:36 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a00007aff45ac0000ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 955.829050][T17736] loop3: p1 p2 p3 p4 [ 955.833521][T17736] loop3: p1 start 1946157066 is beyond EOD, truncated [ 955.840851][T17736] loop3: p2 start 25 is beyond EOD, truncated [ 955.847338][T17736] loop3: p3 start 4293001441 is beyond EOD, truncated [ 955.854273][T17736] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:17:36 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000480ff45ac0000ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 955.966811][T17748] loop3: p1 p2 p3 p4 [ 955.971454][T17748] loop3: p1 start 2046820362 is beyond EOD, truncated [ 955.978948][T17748] loop3: p2 start 25 is beyond EOD, truncated [ 955.985146][T17748] loop3: p3 start 4293001441 is beyond EOD, truncated [ 955.992165][T17748] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 956.075954][ T113] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 956.098697][T17751] loop3: p1 p2 p3 p4 [ 956.102962][T17751] loop3: p1 start 2147745802 is beyond EOD, truncated [ 956.110237][T17751] loop3: p2 start 25 is beyond EOD, truncated [ 956.116936][T17751] loop3: p3 start 4293001441 is beyond EOD, truncated 12:17:36 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000090ff45ac0000ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 956.124245][T17751] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:17:36 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a0026b9ff45ac0000ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 956.236624][T17754] loop3: p1 p2 p3 p4 [ 956.241137][T17754] loop3: p1 start 2415919114 is beyond EOD, truncated [ 956.248435][T17754] loop3: p2 start 25 is beyond EOD, truncated [ 956.254569][T17754] loop3: p3 start 4293001441 is beyond EOD, truncated [ 956.261859][T17754] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 956.315969][ T113] usb 3-1: Using ep0 maxpacket: 16 [ 956.386866][T17757] loop3: p1 p2 p3 p4 [ 956.391385][T17757] loop3: p1 start 3106275338 is beyond EOD, truncated [ 956.399118][T17757] loop3: p2 start 25 is beyond EOD, truncated [ 956.405293][T17757] loop3: p3 start 4293001441 is beyond EOD, truncated [ 956.412335][T17757] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 956.436073][ T113] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 956.447160][ T113] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 956.457935][ T113] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 956.471700][ T113] usb 3-1: New USB device found, idVendor=0e8f, idProduct=0003, bcdDevice= 0.00 [ 956.481296][ T113] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 956.495833][ T113] usb 3-1: config 0 descriptor?? 12:17:37 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a0004f5ff45ac0000ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 956.527765][T17757] loop3: p1 p2 p3 p4 [ 956.532089][T17757] loop3: p1 start 3106275338 is beyond EOD, truncated [ 956.539388][T17757] loop3: p2 start 25 is beyond EOD, truncated [ 956.545569][T17757] loop3: p3 start 4293001441 is beyond EOD, truncated [ 956.553189][T17757] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 956.562626][ T153] loop3: p1 p2 p3 p4 [ 956.568084][ T153] loop3: p1 start 3106275338 is beyond EOD, truncated 12:17:37 executing program 1: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, 0x0, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000200)={0x0, 0x989680}, &(0x7f0000000100)) [ 956.575053][ T153] loop3: p2 start 25 is beyond EOD, truncated [ 956.581478][ T153] loop3: p3 start 4293001441 is beyond EOD, truncated [ 956.593357][ T153] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 956.686465][T17763] loop3: p1 p2 p3 p4 [ 956.690760][T17763] loop3: p1 start 4110680074 is beyond EOD, truncated [ 956.697637][T17763] loop3: p2 start 25 is beyond EOD, truncated [ 956.703750][T17763] loop3: p3 start 4293001441 is beyond EOD, truncated [ 956.710562][T17763] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 956.836033][ T113] usbhid 3-1:0.0: can't add hid device: -71 [ 956.842637][ T113] usbhid: probe of 3-1:0.0 failed with error -71 [ 956.850901][ T113] usb 3-1: USB disconnect, device number 4 [ 957.315878][ T113] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 957.555940][ T113] usb 3-1: Using ep0 maxpacket: 16 [ 957.676037][ T113] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 957.687289][ T113] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 957.697356][ T113] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 957.710495][ T113] usb 3-1: New USB device found, idVendor=0e8f, idProduct=0003, bcdDevice= 0.00 [ 957.719827][ T113] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 957.728628][ T113] usb 3-1: config 0 descriptor?? [ 958.455886][ T113] usbhid 3-1:0.0: can't add hid device: -71 [ 958.462203][ T113] usbhid: probe of 3-1:0.0 failed with error -71 [ 958.470360][ T113] usb 3-1: USB disconnect, device number 5 12:17:39 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000640)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe8f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x20}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0xfffffffffffffd58, &(0x7f0000005380)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x1b, {[@main=@item_4={0x3, 0x0, 0x0, "269b771b"}, @global=@item_4={0x3, 0x1, 0x0, "bef90700"}, @main=@item_012={0x2, 0x0, 0x0, "aa7a"}, @main=@item_4={0x3, 0x0, 0x0, "5db5646d"}, @local=@item_4={0x3, 0x2, 0x0, "9d360e65"}, @main=@item_012={0x1, 0x0, 0x0, "a7"}, @main=@item_012={0x1, 0x0, 0xa, '~'}]}}, 0x0}, 0x0) 12:17:39 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="a3286fd2dfffbbbbbbbbbbbb8100000086dd60163dac0a008800fe9ea3a8399434861b0006000000000000000000000000000000000000000001"], 0x3a) write$binfmt_misc(r1, 0x0, 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) 12:17:39 executing program 1: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, 0x0, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000200)={0x0, 0x989680}, &(0x7f0000000100)) 12:17:39 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000fffff45ac0000ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:17:39 executing program 4: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) dup(r2) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@private0={0xfc, 0x0, [], 0x1}, 0x6b}) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:17:39 executing program 0: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x80045432, &(0x7f0000000040)) ioctl$TIOCNOTTY(r0, 0x5422) r1 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x39) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r2, 0x0, 0x0) 12:17:39 executing program 4: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) dup(r2) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@private0={0xfc, 0x0, [], 0x1}, 0x6b}) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:17:39 executing program 4: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) dup(r2) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@private0={0xfc, 0x0, [], 0x1}, 0x6b}) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:17:39 executing program 0: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x80045432, &(0x7f0000000040)) ioctl$TIOCNOTTY(r0, 0x5422) r1 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x39) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r2, 0x0, 0x0) 12:17:39 executing program 4: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) dup(r2) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:17:39 executing program 0: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x80045432, &(0x7f0000000040)) ioctl$TIOCNOTTY(r0, 0x5422) r1 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x39) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r2, 0x0, 0x0) 12:17:39 executing program 0: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x80045432, &(0x7f0000000040)) ioctl$TIOCNOTTY(r0, 0x5422) r1 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x39) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r2, 0x0, 0x0) [ 958.974965][T17786] loop3: p1 p2 p3 p4 [ 958.979549][T17786] loop3: p1 start 4279173130 is beyond EOD, truncated [ 958.989435][T17786] loop3: p2 start 25 is beyond EOD, truncated [ 959.000095][T17786] loop3: p3 start 4293001441 is beyond EOD, truncated [ 959.008873][T17786] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 959.106373][T17786] loop3: p1 p2 p3 p4 [ 959.113301][T17786] loop3: p1 start 4279173130 is beyond EOD, truncated [ 959.121684][T17786] loop3: p2 start 25 is beyond EOD, truncated [ 959.128421][T17786] loop3: p3 start 4293001441 is beyond EOD, truncated [ 959.135536][T17786] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 959.215837][ T113] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 959.455779][ T113] usb 3-1: Using ep0 maxpacket: 16 [ 959.585856][ T113] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 959.596778][ T113] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 959.607131][ T113] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 959.620309][ T113] usb 3-1: New USB device found, idVendor=0e8f, idProduct=0003, bcdDevice= 0.00 [ 959.629657][ T113] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 959.638638][ T113] usb 3-1: config 0 descriptor?? [ 959.975834][ T113] usbhid 3-1:0.0: can't add hid device: -71 [ 959.981804][ T113] usbhid: probe of 3-1:0.0 failed with error -71 [ 959.989895][ T113] usb 3-1: USB disconnect, device number 6 [ 960.455770][ T113] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 960.695748][ T113] usb 3-1: Using ep0 maxpacket: 16 [ 960.815852][ T113] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 960.826737][ T113] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 960.837242][ T113] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 960.850562][ T113] usb 3-1: New USB device found, idVendor=0e8f, idProduct=0003, bcdDevice= 0.00 [ 960.859917][ T113] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 960.868804][ T113] usb 3-1: config 0 descriptor?? [ 961.615758][ T113] usbhid 3-1:0.0: can't add hid device: -71 [ 961.621708][ T113] usbhid: probe of 3-1:0.0 failed with error -71 [ 961.629740][ T113] usb 3-1: USB disconnect, device number 7 12:17:42 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000640)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe8f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x20}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0xfffffffffffffd58, &(0x7f0000005380)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x1b, {[@main=@item_4={0x3, 0x0, 0x0, "269b771b"}, @global=@item_4={0x3, 0x1, 0x0, "bef90700"}, @main=@item_012={0x2, 0x0, 0x0, "aa7a"}, @main=@item_4={0x3, 0x0, 0x0, "5db5646d"}, @local=@item_4={0x3, 0x2, 0x0, "9d360e65"}, @main=@item_012={0x1, 0x0, 0x0, "a7"}, @main=@item_012={0x1, 0x0, 0xa, '~'}]}}, 0x0}, 0x0) 12:17:42 executing program 4: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) dup(r2) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:17:42 executing program 0: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x80045432, &(0x7f0000000040)) ioctl$TIOCNOTTY(r0, 0x5422) r1 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x39) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r2, 0x0, 0x0) 12:17:42 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000002ff45ac0000ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:17:42 executing program 1: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, 0x0, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000200)={0x0, 0x989680}, &(0x7f0000000100)) 12:17:42 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="a3286fd2dfffbbbbbbbbbbbb8100000086dd60163dac0a008800fe9ea3a8399434861b0006000000000000000000000000000000000000000001"], 0x3a) write$binfmt_misc(r1, 0x0, 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) 12:17:42 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000003ff45ac0000ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 962.109418][T17833] loop3: p1 p2 p3 p4 [ 962.114679][T17833] loop3: p1 start 33554442 is beyond EOD, truncated [ 962.121469][T17833] loop3: p2 start 25 is beyond EOD, truncated [ 962.127849][T17833] loop3: p3 start 4293001441 is beyond EOD, truncated [ 962.134741][T17833] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:17:42 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000004ff45ac0000ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 962.236421][T17844] loop3: p1 p2 p3 p4 [ 962.240752][T17844] loop3: p1 start 50331658 is beyond EOD, truncated [ 962.247990][T17844] loop3: p2 start 25 is beyond EOD, truncated [ 962.254135][T17844] loop3: p3 start 4293001441 is beyond EOD, truncated [ 962.261413][T17844] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 962.335665][ T113] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 962.366210][T17847] loop3: p1 p2 p3 p4 [ 962.370408][T17847] loop3: p1 start 67108874 is beyond EOD, truncated [ 962.377425][T17847] loop3: p2 start 25 is beyond EOD, truncated 12:17:43 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000005ff45ac0000ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 962.383538][T17847] loop3: p3 start 4293001441 is beyond EOD, truncated [ 962.390421][T17847] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:17:43 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000006ff45ac0000ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 962.466151][T17850] loop3: p1 p2 p3 p4 [ 962.470269][T17850] loop3: p1 start 83886090 is beyond EOD, truncated [ 962.477122][T17850] loop3: p2 start 25 is beyond EOD, truncated [ 962.483209][T17850] loop3: p3 start 4293001441 is beyond EOD, truncated [ 962.490162][T17850] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:17:43 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000007ff45ac0000ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 962.575661][ T113] usb 3-1: Using ep0 maxpacket: 16 [ 962.586807][T17853] loop3: p1 p2 p3 p4 [ 962.591008][T17853] loop3: p1 start 100663306 is beyond EOD, truncated [ 962.597933][T17853] loop3: p2 start 25 is beyond EOD, truncated [ 962.604082][T17853] loop3: p3 start 4293001441 is beyond EOD, truncated [ 962.612098][T17853] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 962.696225][T17856] loop3: p1 p2 p3 p4 [ 962.700445][T17856] loop3: p1 start 117440522 is beyond EOD, truncated [ 962.707668][T17856] loop3: p2 start 25 is beyond EOD, truncated [ 962.713775][T17856] loop3: p3 start 4293001441 is beyond EOD, truncated [ 962.721222][ T113] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 962.732177][ T113] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 962.742597][T17856] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 962.750247][ T113] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 962.764112][ T113] usb 3-1: New USB device found, idVendor=0e8f, idProduct=0003, bcdDevice= 0.00 [ 962.773638][ T113] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 962.782599][ T113] usb 3-1: config 0 descriptor?? 12:17:43 executing program 1: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000200)={0x0, 0x989680}, &(0x7f0000000100)) [ 962.855995][T17856] loop3: p1 p2 p3 p4 [ 962.860198][T17856] loop3: p1 start 117440522 is beyond EOD, truncated [ 962.867633][T17856] loop3: p2 start 25 is beyond EOD, truncated [ 962.874427][T17856] loop3: p3 start 4293001441 is beyond EOD, truncated [ 962.881739][T17856] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 963.115652][ T113] usbhid 3-1:0.0: can't add hid device: -71 [ 963.121718][ T113] usbhid: probe of 3-1:0.0 failed with error -71 [ 963.129708][ T113] usb 3-1: USB disconnect, device number 8 [ 963.585597][ T113] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 963.825573][ T113] usb 3-1: Using ep0 maxpacket: 16 [ 963.945635][ T113] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 963.956608][ T113] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 963.966931][ T113] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 963.980164][ T113] usb 3-1: New USB device found, idVendor=0e8f, idProduct=0003, bcdDevice= 0.00 [ 963.989587][ T113] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 963.998477][ T113] usb 3-1: config 0 descriptor?? [ 964.725567][ T113] usbhid 3-1:0.0: can't add hid device: -71 [ 964.731572][ T113] usbhid: probe of 3-1:0.0 failed with error -71 [ 964.739722][ T113] usb 3-1: USB disconnect, device number 9 12:17:45 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000640)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe8f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x20}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0xfffffffffffffd58, &(0x7f0000005380)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x1b, {[@main=@item_4={0x3, 0x0, 0x0, "269b771b"}, @global=@item_4={0x3, 0x1, 0x0, "bef90700"}, @main=@item_012={0x2, 0x0, 0x0, "aa7a"}, @main=@item_4={0x3, 0x0, 0x0, "5db5646d"}, @local=@item_4={0x3, 0x2, 0x0, "9d360e65"}, @main=@item_012={0x1, 0x0, 0x0, "a7"}, @main=@item_012={0x1, 0x0, 0xa, '~'}]}}, 0x0}, 0x0) 12:17:45 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000008ff45ac0000ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:17:45 executing program 1: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000200)={0x0, 0x989680}, &(0x7f0000000100)) 12:17:45 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="a3286fd2dfffbbbbbbbbbbbb8100000086dd60163dac0a008800fe9ea3a8399434861b0006000000000000000000000000000000000000000001"], 0x3a) write$binfmt_misc(r1, 0x0, 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) 12:17:45 executing program 4: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) dup(r2) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:17:45 executing program 0: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x80045432, &(0x7f0000000040)) ioctl$TIOCNOTTY(r0, 0x5422) r1 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x39) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r2, 0x0, 0x0) 12:17:45 executing program 1: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000200)={0x0, 0x989680}, &(0x7f0000000100)) 12:17:45 executing program 1: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_nanosleep(0x2, 0x0, 0x0, &(0x7f0000000100)) 12:17:46 executing program 1: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_nanosleep(0x2, 0x0, 0x0, &(0x7f0000000100)) 12:17:46 executing program 1: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_nanosleep(0x2, 0x0, 0x0, &(0x7f0000000100)) [ 965.256074][T17883] loop3: p1 p2 p3 p4 [ 965.260226][T17883] loop3: p1 start 134217738 is beyond EOD, truncated [ 965.276502][T17883] loop3: p2 start 25 is beyond EOD, truncated [ 965.282721][T17883] loop3: p3 start 4293001441 is beyond EOD, truncated [ 965.290088][T17883] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:17:46 executing program 1: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000200)={0x0, 0x989680}, 0x0) 12:17:46 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000009ff45ac0000ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 965.368487][T17883] loop3: p1 p2 p3 p4 [ 965.372636][T17883] loop3: p1 start 134217738 is beyond EOD, truncated [ 965.379968][T17883] loop3: p2 start 25 is beyond EOD, truncated [ 965.386462][T17883] loop3: p3 start 4293001441 is beyond EOD, truncated [ 965.393547][T17883] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 965.455506][T11066] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 965.476310][ T153] loop3: p1 p2 p3 p4 [ 965.480455][ T153] loop3: p1 start 134217738 is beyond EOD, truncated [ 965.487385][ T153] loop3: p2 start 25 is beyond EOD, truncated [ 965.493462][ T153] loop3: p3 start 4293001441 is beyond EOD, truncated [ 965.500434][ T153] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 965.586533][T17902] loop3: p1 p2 p3 p4 [ 965.590678][T17902] loop3: p1 start 150994954 is beyond EOD, truncated [ 965.597957][T17902] loop3: p2 start 25 is beyond EOD, truncated [ 965.604042][T17902] loop3: p3 start 4293001441 is beyond EOD, truncated [ 965.611327][T17902] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 965.697268][T17902] loop3: p1 p2 p3 p4 [ 965.701527][T17902] loop3: p1 start 150994954 is beyond EOD, truncated [ 965.708364][T17902] loop3: p2 start 25 is beyond EOD, truncated [ 965.714448][T17902] loop3: p3 start 4293001441 is beyond EOD, truncated [ 965.721249][T11066] usb 3-1: Using ep0 maxpacket: 16 [ 965.726503][T17902] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 965.776193][ T153] loop3: p1 p2 p3 p4 [ 965.780366][ T153] loop3: p1 start 150994954 is beyond EOD, truncated [ 965.787306][ T153] loop3: p2 start 25 is beyond EOD, truncated [ 965.793426][ T153] loop3: p3 start 4293001441 is beyond EOD, truncated [ 965.800516][ T153] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 965.865542][T11066] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 965.876653][T11066] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 965.887215][T11066] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 965.900380][T11066] usb 3-1: New USB device found, idVendor=0e8f, idProduct=0003, bcdDevice= 0.00 [ 965.909776][T11066] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 965.918750][T11066] usb 3-1: config 0 descriptor?? [ 966.255531][T11066] usbhid 3-1:0.0: can't add hid device: -71 [ 966.261511][T11066] usbhid: probe of 3-1:0.0 failed with error -71 [ 966.269005][T11066] usb 3-1: USB disconnect, device number 10 [ 966.725461][T11066] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 966.965422][T11066] usb 3-1: Using ep0 maxpacket: 16 [ 967.085488][T11066] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 967.096371][T11066] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 967.106130][T11066] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 967.118933][T11066] usb 3-1: New USB device found, idVendor=0e8f, idProduct=0003, bcdDevice= 0.00 [ 967.128099][T11066] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 967.137983][T11066] usb 3-1: config 0 descriptor?? [ 967.875454][T11066] usbhid 3-1:0.0: can't add hid device: -71 [ 967.881410][T11066] usbhid: probe of 3-1:0.0 failed with error -71 [ 967.889797][T11066] usb 3-1: USB disconnect, device number 11 12:17:49 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000640)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe8f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x20}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0xfffffffffffffd58, &(0x7f0000005380)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x1b, {[@main=@item_4={0x3, 0x0, 0x0, "269b771b"}, @global=@item_4={0x3, 0x1, 0x0, "bef90700"}, @main=@item_012={0x2, 0x0, 0x0, "aa7a"}, @global=@item_4={0x3, 0x1, 0x0, "88fbd3e0"}, @local=@item_4={0x3, 0x2, 0x0, "9d360e65"}, @main=@item_012={0x1, 0x0, 0x0, "a7"}, @main=@item_012={0x1, 0x0, 0xa, '~'}]}}, 0x0}, 0x0) 12:17:49 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a00000aff45ac0000ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:17:49 executing program 1: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000200)={0x0, 0x989680}, 0x0) 12:17:49 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="a3286fd2dfffbbbbbbbbbbbb8100000086dd60163dac0a008800fe9ea3a8399434861b0006000000000000000000000000000000000000000001"], 0x3a) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x18100, 0x0) 12:17:49 executing program 0: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x80045432, &(0x7f0000000040)) ioctl$TIOCNOTTY(r0, 0x5422) r1 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r2, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x39) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r2, 0x0, 0x0) 12:17:49 executing program 4: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) dup(r2) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@private0={0xfc, 0x0, [], 0x1}, 0x6b}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:17:49 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a00000bff45ac0000ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 968.390359][T17929] loop3: p1 p2 p3 p4 [ 968.394554][T17929] loop3: p1 start 167772170 is beyond EOD, truncated [ 968.401733][T17929] loop3: p2 start 25 is beyond EOD, truncated [ 968.408250][T17929] loop3: p3 start 4293001441 is beyond EOD, truncated [ 968.415005][T17929] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:17:49 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a00000cff45ac0000ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 968.535925][T17939] loop3: p1 p2 p3 p4 [ 968.541195][T17939] loop3: p1 start 184549386 is beyond EOD, truncated [ 968.548451][T17939] loop3: p2 start 25 is beyond EOD, truncated [ 968.554590][T17939] loop3: p3 start 4293001441 is beyond EOD, truncated [ 968.561819][T17939] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 968.605362][T11066] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 968.676128][T17942] loop3: p1 p2 p3 p4 [ 968.680330][T17942] loop3: p1 start 201326602 is beyond EOD, truncated [ 968.687308][T17942] loop3: p2 start 25 is beyond EOD, truncated [ 968.693473][T17942] loop3: p3 start 4293001441 is beyond EOD, truncated [ 968.700533][T17942] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:17:49 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a00000dff45ac0000ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 968.786125][T17942] loop3: p1 p2 p3 p4 [ 968.790311][T17942] loop3: p1 start 201326602 is beyond EOD, truncated [ 968.797566][T17942] loop3: p2 start 25 is beyond EOD, truncated [ 968.803739][T17942] loop3: p3 start 4293001441 is beyond EOD, truncated [ 968.811046][T17942] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 968.845397][T11066] usb 3-1: Using ep0 maxpacket: 16 [ 968.906339][ T363] __loop_clr_fd: partition scan of loop3 failed (rc=-16) [ 968.946420][T17946] loop3: p1 p2 p3 p4 [ 968.950559][T17946] loop3: p1 start 218103818 is beyond EOD, truncated [ 968.957622][T17946] loop3: p2 start 25 is beyond EOD, truncated [ 968.963847][T17946] loop3: p3 start 4293001441 is beyond EOD, truncated [ 968.965441][T11066] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 968.970896][T17946] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 968.982374][T11066] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 12:17:49 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a00000eff45ac0000ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 968.998403][T11066] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 969.011648][T11066] usb 3-1: New USB device found, idVendor=0e8f, idProduct=0003, bcdDevice= 0.00 [ 969.021359][T11066] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 969.030622][T11066] usb 3-1: config 0 descriptor?? 12:17:49 executing program 1: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000200)={0x0, 0x989680}, 0x0) [ 969.095916][T17950] loop3: p1 p2 p3 p4 [ 969.100098][T17950] loop3: p1 start 234881034 is beyond EOD, truncated [ 969.106878][T17950] loop3: p2 start 25 is beyond EOD, truncated [ 969.113012][T17950] loop3: p3 start 4293001441 is beyond EOD, truncated [ 969.119863][T17950] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:17:49 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="a3286fd2dfffbbbbbbbbbbbb8100000086dd60163dac0a008800fe9ea3a8399434861b0006000000000000000000000000000000000000000001"], 0x3a) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x18100, 0x0) [ 969.375372][T11066] usbhid 3-1:0.0: can't add hid device: -71 [ 969.381424][T11066] usbhid: probe of 3-1:0.0 failed with error -71 [ 969.389318][T11066] usb 3-1: USB disconnect, device number 12 [ 969.845317][T11066] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 970.085316][T11066] usb 3-1: Using ep0 maxpacket: 16 [ 970.205342][T11066] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 970.216254][T11066] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 970.226632][T11066] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 970.239804][T11066] usb 3-1: New USB device found, idVendor=0e8f, idProduct=0003, bcdDevice= 0.00 [ 970.249181][T11066] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 970.258051][T11066] usb 3-1: config 0 descriptor?? [ 970.995348][T11066] usbhid 3-1:0.0: can't add hid device: -71 [ 971.001343][T11066] usbhid: probe of 3-1:0.0 failed with error -71 [ 971.017852][T11066] usb 3-1: USB disconnect, device number 13 12:17:52 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000640)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe8f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x20}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0xfffffffffffffd58, &(0x7f0000005380)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x1b, {[@main=@item_4={0x3, 0x0, 0x0, "269b771b"}, @global=@item_4={0x3, 0x1, 0x0, "bef90700"}, @main=@item_012={0x2, 0x0, 0x0, "aa7a"}, @global=@item_4={0x3, 0x1, 0x0, "88fbd3e0"}, @local=@item_4={0x3, 0x2, 0x0, "9d360e65"}, @main=@item_012={0x1, 0x0, 0x0, "a7"}, @main=@item_012={0x1, 0x0, 0xa, '~'}]}}, 0x0}, 0x0) 12:17:52 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000010ff45ac0000ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:17:52 executing program 0: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x80045432, &(0x7f0000000040)) ioctl$TIOCNOTTY(r0, 0x5422) r1 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r2, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x39) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r2, 0x0, 0x0) 12:17:52 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000060ff45ac0000ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:17:52 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="a3286fd2dfffbbbbbbbbbbbb8100000086dd60163dac0a008800fe9ea3a8399434861b0006000000000000000000000000000000000000000001"], 0x3a) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x18100, 0x0) 12:17:52 executing program 4: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) dup(r2) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@private0={0xfc, 0x0, [], 0x1}, 0x6b}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 971.508624][T17974] loop3: p1 p2 p3 p4 [ 971.513801][T17974] loop3: p1 start 268435466 is beyond EOD, truncated [ 971.521301][T17974] loop3: p2 start 25 is beyond EOD, truncated [ 971.528123][T17974] loop3: p3 start 4293001441 is beyond EOD, truncated [ 971.534999][T17974] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 971.535887][T17980] loop1: p1 p2 p3 p4 [ 971.547467][T17980] loop1: p1 start 1610612746 is beyond EOD, truncated [ 971.554420][T17980] loop1: p2 start 25 is beyond EOD, truncated [ 971.560793][T17980] loop1: p3 start 4293001441 is beyond EOD, truncated [ 971.567722][T17980] loop1: p4 size 3657465856 extends beyond EOD, truncated 12:17:52 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000640)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe8f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x20}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0xfffffffffffffd58, &(0x7f0000005380)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x1b, {[@main=@item_4={0x3, 0x0, 0x0, "269b771b"}, @global=@item_4={0x3, 0x1, 0x0, "bef90700"}, @main=@item_012={0x2, 0x0, 0x0, "aa7a"}, @global=@item_4={0x3, 0x1, 0x0, "88fbd3e0"}, @local=@item_4={0x3, 0x2, 0x0, "9d360e65"}, @main=@item_012={0x1, 0x0, 0x0, "a7"}, @main=@item_012={0x1, 0x0, 0xa, '~'}]}}, 0x0}, 0x0) [ 971.699520][T17974] loop3: p1 p2 p3 p4 [ 971.704742][T17974] loop3: p1 start 268435466 is beyond EOD, truncated [ 971.715490][T17974] loop3: p2 start 25 is beyond EOD, truncated [ 971.721574][T17974] loop3: p3 start 4293001441 is beyond EOD, truncated [ 971.728380][T17974] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 971.735540][ T113] usb 3-1: new high-speed USB device number 14 using dummy_hcd 12:17:52 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000011ff45ac0000ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 971.775838][ T153] loop3: p1 p2 p3 p4 [ 971.780376][ T153] loop3: p1 start 268435466 is beyond EOD, truncated [ 971.790472][ T153] loop3: p2 start 25 is beyond EOD, truncated [ 971.797003][ T153] loop3: p3 start 4293001441 is beyond EOD, truncated [ 971.803776][ T153] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 971.946064][T17992] loop3: p1 p2 p3 p4 [ 971.950262][T17992] loop3: p1 start 285212682 is beyond EOD, truncated [ 971.957662][T17992] loop3: p2 start 25 is beyond EOD, truncated [ 971.963905][T17992] loop3: p3 start 4293001441 is beyond EOD, truncated [ 971.971216][T17992] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 971.985223][ T113] usb 3-1: Using ep0 maxpacket: 16 [ 972.080375][T17992] loop3: p1 p2 p3 p4 [ 972.084522][T17992] loop3: p1 start 285212682 is beyond EOD, truncated [ 972.091252][T17992] loop3: p2 start 25 is beyond EOD, truncated [ 972.097399][T17992] loop3: p3 start 4293001441 is beyond EOD, truncated [ 972.104168][T17992] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 972.115322][ T113] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 972.126375][ T113] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 972.136495][ T113] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 972.149472][ T113] usb 3-1: New USB device found, idVendor=0e8f, idProduct=0003, bcdDevice= 0.00 [ 972.158773][ T113] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 972.159204][ T153] loop3: p1 p2 p3 p4 [ 972.167983][ T113] usb 3-1: config 0 descriptor?? 12:17:52 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000012ff45ac0000ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 972.173149][ T153] loop3: p1 start 285212682 is beyond EOD, truncated [ 972.183146][ T153] loop3: p2 start 25 is beyond EOD, truncated [ 972.189404][ T153] loop3: p3 start 4293001441 is beyond EOD, truncated [ 972.196278][ T153] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:17:53 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="a3286fd2dfffbbbbbbbbbbbb8100000086dd60163dac0a008800fe9ea3a8399434861b0006000000000000000000000000000000000000000001"], 0x3a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x18100, 0x0) 12:17:53 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000013ff45ac0000ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 972.349862][T17996] loop3: p1 p2 p3 p4 [ 972.356024][T17996] loop3: p1 start 301989898 is beyond EOD, truncated [ 972.363197][T17996] loop3: p2 start 25 is beyond EOD, truncated [ 972.370097][T17996] loop3: p3 start 4293001441 is beyond EOD, truncated [ 972.377426][T17996] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 972.496096][T18001] loop3: p1 p2 p3 p4 [ 972.501461][T18001] loop3: p1 start 318767114 is beyond EOD, truncated [ 972.508984][T18001] loop3: p2 start 25 is beyond EOD, truncated [ 972.515581][T18001] loop3: p3 start 4293001441 is beyond EOD, truncated [ 972.522527][T18001] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 972.535769][ T153] loop3: p1 p2 p3 p4 12:17:53 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000022ff45ac0000ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 972.539944][ T153] loop3: p1 start 318767114 is beyond EOD, truncated [ 972.547395][ T113] usbhid 3-1:0.0: can't add hid device: -71 [ 972.553453][ T113] usbhid: probe of 3-1:0.0 failed with error -71 [ 972.561187][ T153] loop3: p2 start 25 is beyond EOD, truncated [ 972.568374][ T113] usb 3-1: USB disconnect, device number 14 [ 972.574642][ T153] loop3: p3 start 4293001441 is beyond EOD, truncated [ 972.582420][ T153] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 972.685789][T18005] loop3: p1 p2 p3 p4 [ 972.690122][T18005] loop3: p1 start 570425354 is beyond EOD, truncated [ 972.697052][T18005] loop3: p2 start 25 is beyond EOD, truncated [ 972.703314][T18005] loop3: p3 start 4293001441 is beyond EOD, truncated [ 972.710154][T18005] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 973.025162][ T113] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 973.275141][ T113] usb 3-1: Using ep0 maxpacket: 16 [ 973.395199][ T113] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 973.406162][ T113] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 973.416043][ T113] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 973.428966][ T113] usb 3-1: New USB device found, idVendor=0e8f, idProduct=0003, bcdDevice= 0.00 [ 973.438052][ T113] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 973.446627][ T113] usb 3-1: config 0 descriptor?? [ 974.185138][ T113] usbhid 3-1:0.0: can't add hid device: -71 [ 974.191253][ T113] usbhid: probe of 3-1:0.0 failed with error -71 [ 974.199567][ T113] usb 3-1: USB disconnect, device number 15 12:17:55 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000640)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe8f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x20}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0xfffffffffffffd58, &(0x7f0000005380)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x1b, {[@main=@item_4={0x3, 0x0, 0x0, "269b771b"}, @global=@item_4={0x3, 0x1, 0x0, "bef90700"}, @main=@item_012={0x2, 0x0, 0x0, "aa7a"}, @global=@item_4={0x3, 0x1, 0x0, "88fbd3e0"}, @local=@item_4={0x3, 0x2, 0x0, "9d360e65"}, @main=@item_012={0x1, 0x0, 0x0, "a7"}, @main=@item_012={0x1, 0x0, 0xa, '~'}]}}, 0x0}, 0x0) 12:17:55 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="a3286fd2dfffbbbbbbbbbbbb8100000086dd60163dac0a008800fe9ea3a8399434861b0006000000000000000000000000000000000000000001"], 0x3a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x18100, 0x0) 12:17:55 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000024ff45ac0000ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:17:55 executing program 0: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x80045432, &(0x7f0000000040)) ioctl$TIOCNOTTY(r0, 0x5422) r1 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r2, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x39) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r2, 0x0, 0x0) 12:17:55 executing program 4: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) dup(r2) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@private0={0xfc, 0x0, [], 0x1}, 0x6b}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:17:55 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000640)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe8f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x20}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0xfffffffffffffd58, &(0x7f0000005380)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x1b, {[@main=@item_4={0x3, 0x0, 0x0, "269b771b"}, @global=@item_4={0x3, 0x1, 0x0, "bef90700"}, @main=@item_012={0x2, 0x0, 0x0, "aa7a"}, @global=@item_4={0x3, 0x1, 0x0, "88fbd3e0"}, @local=@item_4={0x3, 0x2, 0x0, "9d360e65"}, @main=@item_012={0x1, 0x0, 0x0, "a7"}, @main=@item_012={0x1, 0x0, 0xa, '~'}]}}, 0x0}, 0x0) [ 974.688902][T18020] loop3: p1 p2 p3 p4 [ 974.693104][T18020] loop3: p1 start 603979786 is beyond EOD, truncated [ 974.705002][T18020] loop3: p2 start 25 is beyond EOD, truncated [ 974.713654][T18020] loop3: p3 start 4293001441 is beyond EOD, truncated [ 974.720668][T18020] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:17:55 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000025ff45ac0000ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 974.795543][T18020] loop3: p1 p2 p3 p4 [ 974.799763][T18020] loop3: p1 start 603979786 is beyond EOD, truncated [ 974.806513][T18020] loop3: p2 start 25 is beyond EOD, truncated [ 974.812611][T18020] loop3: p3 start 4293001441 is beyond EOD, truncated [ 974.819452][T18020] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 974.828762][ T153] loop3: p1 p2 p3 p4 [ 974.834075][ T153] loop3: p1 start 603979786 is beyond EOD, truncated [ 974.841390][ T153] loop3: p2 start 25 is beyond EOD, truncated [ 974.847999][ T153] loop3: p3 start 4293001441 is beyond EOD, truncated [ 974.855669][ T153] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 974.925077][T11066] usb 3-1: new high-speed USB device number 16 using dummy_hcd 12:17:55 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000048ff45ac0000ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 974.985529][T18035] loop3: p1 p2 p3 p4 [ 974.989837][T18035] loop3: p1 start 620757002 is beyond EOD, truncated [ 974.996771][T18035] loop3: p2 start 25 is beyond EOD, truncated [ 975.002939][T18035] loop3: p3 start 4293001441 is beyond EOD, truncated [ 975.009852][T18035] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 975.125410][T18038] loop3: p1 p2 p3 p4 [ 975.129684][T18038] loop3: p1 start 1207959562 is beyond EOD, truncated [ 975.136587][T18038] loop3: p2 start 25 is beyond EOD, truncated [ 975.142844][T18038] loop3: p3 start 4293001441 is beyond EOD, truncated [ 975.149711][T18038] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 975.165050][T11066] usb 3-1: Using ep0 maxpacket: 16 [ 975.248463][T18038] loop3: p1 p2 p3 p4 [ 975.252723][T18038] loop3: p1 start 1207959562 is beyond EOD, truncated [ 975.260949][T18038] loop3: p2 start 25 is beyond EOD, truncated [ 975.267459][T18038] loop3: p3 start 4293001441 is beyond EOD, truncated [ 975.274271][T18038] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:17:56 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a00004cff45ac0000ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 975.295166][T11066] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 975.306211][T11066] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 975.317280][T11066] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 975.330649][T11066] usb 3-1: New USB device found, idVendor=0e8f, idProduct=0003, bcdDevice= 0.00 [ 975.340228][T11066] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 975.349188][T11066] usb 3-1: config 0 descriptor?? [ 975.415673][T18042] loop3: p1 p2 p3 p4 [ 975.420006][T18042] loop3: p1 start 1275068426 is beyond EOD, truncated [ 975.427026][T18042] loop3: p2 start 25 is beyond EOD, truncated [ 975.433140][T18042] loop3: p3 start 4293001441 is beyond EOD, truncated [ 975.440010][T18042] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:17:56 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="a3286fd2dfffbbbbbbbbbbbb8100000086dd60163dac0a008800fe9ea3a8399434861b0006000000000000000000000000000000000000000001"], 0x3a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x18100, 0x0) 12:17:56 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000060ff45ac0000ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 975.523108][T18042] loop3: p1 p2 p3 p4 [ 975.527407][T18042] loop3: p1 start 1275068426 is beyond EOD, truncated [ 975.534576][T18042] loop3: p2 start 25 is beyond EOD, truncated [ 975.541610][T18042] loop3: p3 start 4293001441 is beyond EOD, truncated [ 975.548874][T18042] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 975.686021][T18049] loop3: p1 p2 p3 p4 [ 975.690384][T18049] loop3: p1 start 1610612746 is beyond EOD, truncated [ 975.695093][T11066] usbhid 3-1:0.0: can't add hid device: -71 [ 975.698723][T18049] loop3: p2 start 25 is beyond EOD, truncated [ 975.703799][T11066] usbhid: probe of 3-1:0.0 failed with error -71 [ 975.709914][T18049] loop3: p3 start 4293001441 is beyond EOD, truncated [ 975.717358][T11066] usb 3-1: USB disconnect, device number 16 [ 975.723642][T18049] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:17:56 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000068ff45ac0000ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 975.855922][T18052] loop3: p1 p2 p3 p4 [ 975.860315][T18052] loop3: p1 start 1744830474 is beyond EOD, truncated [ 975.867711][T18052] loop3: p2 start 25 is beyond EOD, truncated [ 975.873786][T18052] loop3: p3 start 4293001441 is beyond EOD, truncated [ 975.881024][T18052] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 976.185068][T11066] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 976.425002][T11066] usb 3-1: Using ep0 maxpacket: 16 [ 976.545074][T11066] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 976.556019][T11066] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 976.566469][T11066] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 976.579634][T11066] usb 3-1: New USB device found, idVendor=0e8f, idProduct=0003, bcdDevice= 0.00 [ 976.589111][T11066] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 976.598047][T11066] usb 3-1: config 0 descriptor?? [ 977.334988][T11066] usbhid 3-1:0.0: can't add hid device: -71 [ 977.340996][T11066] usbhid: probe of 3-1:0.0 failed with error -71 [ 977.348809][T11066] usb 3-1: USB disconnect, device number 17 12:17:58 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000640)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe8f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x20}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0xfffffffffffffd58, &(0x7f0000005380)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x1d, {[@main=@item_4={0x3, 0x0, 0x0, "269b771b"}, @global=@item_4={0x3, 0x1, 0x0, "bef90700"}, @main=@item_4={0x3, 0x0, 0x0, "5db5646d"}, @global=@item_4={0x3, 0x1, 0x0, "88fbd3e0"}, @local=@item_4={0x3, 0x2, 0x0, "9d360e65"}, @main=@item_012={0x1, 0x0, 0x0, "a7"}, @main=@item_012={0x1, 0x0, 0xa, '~'}]}}, 0x0}, 0x0) 12:17:58 executing program 0: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x80045432, &(0x7f0000000040)) ioctl$TIOCNOTTY(r0, 0x5422) r1 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) dup(r3) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r2, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x39) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r2, 0x0, 0x0) 12:17:58 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000640)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe8f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x20}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0xfffffffffffffd58, &(0x7f0000005380)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x1b, {[@main=@item_4={0x3, 0x0, 0x0, "269b771b"}, @global=@item_4={0x3, 0x1, 0x0, "bef90700"}, @main=@item_012={0x2, 0x0, 0x0, "aa7a"}, @global=@item_4={0x3, 0x1, 0x0, "88fbd3e0"}, @local=@item_4={0x3, 0x2, 0x0, "9d360e65"}, @main=@item_012={0x1, 0x0, 0x0, "a7"}, @main=@item_012={0x1, 0x0, 0xa, '~'}]}}, 0x0}, 0x0) 12:17:58 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="a3286fd2dfffbbbbbbbbbbbb8100000086dd60163dac0a008800fe9ea3a8399434861b0006000000000000000000000000000000000000000001"], 0x3a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x0, 0x0) 12:17:58 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a00006cff45ac0000ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:17:58 executing program 4: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socket$packet(0x11, 0x2, 0x300) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@private0={0xfc, 0x0, [], 0x1}, 0x6b}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 977.837774][T18070] loop3: p1 p2 p3 p4 [ 977.842473][T18070] loop3: p1 start 1811939338 is beyond EOD, truncated [ 977.849534][T18070] loop3: p2 start 25 is beyond EOD, truncated [ 977.855709][T18070] loop3: p3 start 4293001441 is beyond EOD, truncated [ 977.862508][T18070] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:17:58 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000074ff45ac0000ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:17:58 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a00007aff45ac0000ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 977.995950][T18083] loop3: p1 p2 p3 p4 [ 978.000246][T18083] loop3: p1 start 1946157066 is beyond EOD, truncated [ 978.007356][T18083] loop3: p2 start 25 is beyond EOD, truncated [ 978.013465][T18083] loop3: p3 start 4293001441 is beyond EOD, truncated [ 978.020352][T18083] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 978.064950][T11066] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 978.145506][T18086] loop3: p1 p2 p3 p4 [ 978.149822][T18086] loop3: p1 start 2046820362 is beyond EOD, truncated [ 978.157058][T18086] loop3: p2 start 25 is beyond EOD, truncated [ 978.163181][T18086] loop3: p3 start 4293001441 is beyond EOD, truncated [ 978.170149][T18086] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:17:58 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff09ac0000ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:17:59 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff0aac0000ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 978.285376][T18090] loop3: p1 p2 p3 p4 [ 978.289552][T18090] loop3: p1 start 10 is beyond EOD, truncated [ 978.295758][T18090] loop3: p2 start 25 is beyond EOD, truncated [ 978.301848][T18090] loop3: p3 start 4293001441 is beyond EOD, truncated [ 978.304908][T11066] usb 3-1: Using ep0 maxpacket: 16 [ 978.308908][T18090] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 978.415277][T18093] loop3: p1 p2 p3 p4 [ 978.419487][T18093] loop3: p1 start 10 is beyond EOD, truncated [ 978.425744][T11066] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 978.435337][T18093] loop3: p2 start 25 is beyond EOD, truncated [ 978.436766][T11066] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 978.442820][T18093] loop3: p3 start 4293001441 is beyond EOD, truncated [ 978.453332][T11066] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 978.459711][T18093] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 978.472825][T11066] usb 3-1: New USB device found, idVendor=0e8f, idProduct=0003, bcdDevice= 0.00 [ 978.488432][T11066] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 978.497596][T11066] usb 3-1: config 0 descriptor?? 12:17:59 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff25ac0000ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:17:59 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="a3286fd2dfffbbbbbbbbbbbb8100000086dd60163dac0a008800fe9ea3a8399434861b0006000000000000000000000000000000000000000001"], 0x3a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x0, 0x0) [ 978.595727][T18096] loop3: p1 p2 p3 p4 [ 978.600710][T18096] loop3: p1 start 10 is beyond EOD, truncated [ 978.607178][T18096] loop3: p2 start 25 is beyond EOD, truncated [ 978.613316][T18096] loop3: p3 start 4293001441 is beyond EOD, truncated [ 978.620140][T18096] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 978.718138][T18096] loop3: p1 p2 p3 p4 [ 978.722277][T18096] loop3: p1 start 10 is beyond EOD, truncated [ 978.728413][T18096] loop3: p2 start 25 is beyond EOD, truncated [ 978.734503][T18096] loop3: p3 start 4293001441 is beyond EOD, truncated [ 978.741469][T18096] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 978.825708][ T153] loop3: p1 p2 p3 p4 [ 978.829845][ T153] loop3: p1 start 10 is beyond EOD, truncated [ 978.836041][T11066] usbhid 3-1:0.0: can't add hid device: -71 [ 978.841985][T11066] usbhid: probe of 3-1:0.0 failed with error -71 [ 978.848351][ T153] loop3: p2 start 25 is beyond EOD, truncated [ 978.854411][ T153] loop3: p3 start 4293001441 is beyond EOD, truncated [ 978.861872][ T153] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 978.862269][T11066] usb 3-1: USB disconnect, device number 18 [ 979.324874][T11066] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 979.564923][T11066] usb 3-1: Using ep0 maxpacket: 16 [ 979.684932][T11066] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 979.696059][T11066] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 979.706534][T11066] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 979.719757][T11066] usb 3-1: New USB device found, idVendor=0e8f, idProduct=0003, bcdDevice= 0.00 [ 979.729152][T11066] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 979.738056][T11066] usb 3-1: config 0 descriptor?? [ 980.484861][T11066] usbhid 3-1:0.0: can't add hid device: -71 [ 980.491153][T11066] usbhid: probe of 3-1:0.0 failed with error -71 [ 980.499375][T11066] usb 3-1: USB disconnect, device number 19 12:18:01 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000640)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe8f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x20}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0xfffffffffffffd58, &(0x7f0000005380)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x1d, {[@main=@item_4={0x3, 0x0, 0x0, "269b771b"}, @global=@item_4={0x3, 0x1, 0x0, "bef90700"}, @main=@item_4={0x3, 0x0, 0x0, "5db5646d"}, @global=@item_4={0x3, 0x1, 0x0, "88fbd3e0"}, @local=@item_4={0x3, 0x2, 0x0, "9d360e65"}, @main=@item_012={0x1, 0x0, 0x0, "a7"}, @main=@item_012={0x1, 0x0, 0xa, '~'}]}}, 0x0}, 0x0) 12:18:01 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0200ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:18:01 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="a3286fd2dfffbbbbbbbbbbbb8100000086dd60163dac0a008800fe9ea3a8399434861b0006000000000000000000000000000000000000000001"], 0x3a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x0, 0x0) 12:18:01 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000640)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe8f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x20}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0xfffffffffffffd58, &(0x7f0000005380)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x1f, {[@main=@item_4={0x3, 0x0, 0x0, "269b771b"}, @global=@item_4={0x3, 0x1, 0x0, "bef90700"}, @main=@item_012={0x2, 0x0, 0x0, "aa7a"}, @main=@item_4={0x3, 0x0, 0x0, "5db5646d"}, @global=@item_4={0x3, 0x1, 0x0, "88fbd3e0"}, @local=@item_4={0x3, 0x2, 0x0, "9d360e65"}, @main, @main=@item_012={0x1, 0x0, 0xa, '~'}]}}, 0x0}, 0x0) 12:18:01 executing program 4: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@private0={0xfc, 0x0, [], 0x1}, 0x6b}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:18:01 executing program 0: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x80045432, &(0x7f0000000040)) ioctl$TIOCNOTTY(r0, 0x5422) r1 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) dup(r3) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r2, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x39) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r2, 0x0, 0x0) [ 980.995199][T18123] loop3: p1 p2 p3 p4 [ 980.999349][T18123] loop3: p1 start 10 is beyond EOD, truncated [ 981.006653][T18123] loop3: p2 start 25 is beyond EOD, truncated [ 981.012713][T18123] loop3: p3 start 4293001441 is beyond EOD, truncated [ 981.020005][T18123] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:18:01 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0300ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 981.135271][T18123] loop3: p1 p2 p3 p4 [ 981.139450][T18123] loop3: p1 start 10 is beyond EOD, truncated [ 981.145974][T18123] loop3: p2 start 25 is beyond EOD, truncated [ 981.152087][T18123] loop3: p3 start 4293001441 is beyond EOD, truncated [ 981.159347][T18123] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 981.204806][T11066] usb 3-1: new high-speed USB device number 20 using dummy_hcd 12:18:02 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0400ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 981.305205][T18133] loop3: p1 p2 p3 p4 [ 981.309355][T18133] loop3: p1 start 10 is beyond EOD, truncated [ 981.315944][T18133] loop3: p2 start 25 is beyond EOD, truncated [ 981.322112][T18133] loop3: p3 start 4293001441 is beyond EOD, truncated [ 981.329290][T18133] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:18:02 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0500ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 981.435289][T18136] loop3: p1 p2 p3 p4 [ 981.439513][T18136] loop3: p1 start 10 is beyond EOD, truncated [ 981.445744][T11066] usb 3-1: Using ep0 maxpacket: 16 [ 981.451054][T18136] loop3: p2 start 25 is beyond EOD, truncated [ 981.457422][T18136] loop3: p3 start 4293001441 is beyond EOD, truncated [ 981.464193][T18136] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 981.565501][T18139] loop3: p1 p2 p3 p4 [ 981.570716][T18139] loop3: p1 start 10 is beyond EOD, truncated [ 981.577299][T18139] loop3: p2 start 25 is beyond EOD, truncated [ 981.583415][T18139] loop3: p3 start 4293001441 is beyond EOD, truncated [ 981.584853][T11066] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 981.591188][T18139] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:18:02 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0600ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 981.601350][T11066] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 981.621835][T11066] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 981.635070][T11066] usb 3-1: New USB device found, idVendor=0e8f, idProduct=0003, bcdDevice= 0.00 [ 981.644292][T11066] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 981.653549][ T153] loop3: p1 p2 p3 p4 [ 981.657969][ T153] loop3: p1 start 10 is beyond EOD, truncated [ 981.664048][ T153] loop3: p2 start 25 is beyond EOD, truncated [ 981.670413][T11066] usb 3-1: config 0 descriptor?? [ 981.673707][ T153] loop3: p3 start 4293001441 is beyond EOD, truncated [ 981.682458][ T153] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:18:02 executing program 5: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0200ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 981.775280][T18142] loop3: p1 p2 p3 p4 [ 981.779463][T18142] loop3: p1 start 10 is beyond EOD, truncated [ 981.786268][T18142] loop3: p2 start 25 is beyond EOD, truncated [ 981.799565][T18142] loop3: p3 start 4293001441 is beyond EOD, truncated [ 981.806811][T18142] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 981.857484][T18146] loop5: p1 p2 p3 p4 [ 981.861751][T18146] loop5: p1 start 10 is beyond EOD, truncated [ 981.868006][T18146] loop5: p2 start 25 is beyond EOD, truncated [ 981.874259][T18146] loop5: p3 start 4293001441 is beyond EOD, truncated [ 981.881168][T18146] loop5: p4 size 3657465856 extends beyond EOD, truncated 12:18:02 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0700ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 981.975254][T18150] loop3: p1 p2 p3 p4 [ 981.980343][T18150] loop3: p1 start 10 is beyond EOD, truncated [ 981.986863][T18150] loop3: p2 start 25 is beyond EOD, truncated [ 981.993022][T18150] loop3: p3 start 4293001441 is beyond EOD, truncated [ 982.000333][T18150] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 982.034795][T11066] usbhid 3-1:0.0: can't add hid device: -71 [ 982.040782][T11066] usbhid: probe of 3-1:0.0 failed with error -71 [ 982.048713][T11066] usb 3-1: USB disconnect, device number 20 [ 982.514716][T11066] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 982.754707][T11066] usb 3-1: Using ep0 maxpacket: 16 [ 982.874772][T11066] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 982.885695][T11066] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 982.895556][T11066] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 982.908396][T11066] usb 3-1: New USB device found, idVendor=0e8f, idProduct=0003, bcdDevice= 0.00 [ 982.917463][T11066] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 982.926158][T11066] usb 3-1: config 0 descriptor?? [ 983.664744][T11066] usbhid 3-1:0.0: can't add hid device: -71 [ 983.670722][T11066] usbhid: probe of 3-1:0.0 failed with error -71 [ 983.678869][T11066] usb 3-1: USB disconnect, device number 21 12:18:04 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000640)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe8f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x20}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0xfffffffffffffd58, &(0x7f0000005380)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x1d, {[@main=@item_4={0x3, 0x0, 0x0, "269b771b"}, @global=@item_4={0x3, 0x1, 0x0, "bef90700"}, @main=@item_4={0x3, 0x0, 0x0, "5db5646d"}, @global=@item_4={0x3, 0x1, 0x0, "88fbd3e0"}, @local=@item_4={0x3, 0x2, 0x0, "9d360e65"}, @main=@item_012={0x1, 0x0, 0x0, "a7"}, @main=@item_012={0x1, 0x0, 0xa, '~'}]}}, 0x0}, 0x0) 12:18:04 executing program 5: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x80045432, &(0x7f0000000040)) ioctl$TIOCNOTTY(r0, 0x5422) r1 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) dup(r3) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r2, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x39) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r2, 0x0, 0x0) 12:18:04 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0800ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:18:04 executing program 4: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@private0={0xfc, 0x0, [], 0x1}, 0x6b}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:18:04 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000640)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe8f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x20}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0xfffffffffffffd58, &(0x7f0000005380)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x1f, {[@main=@item_4={0x3, 0x0, 0x0, "269b771b"}, @global=@item_4={0x3, 0x1, 0x0, "bef90700"}, @main=@item_012={0x2, 0x0, 0x0, "aa7a"}, @main=@item_4={0x3, 0x0, 0x0, "5db5646d"}, @global=@item_4={0x3, 0x1, 0x0, "88fbd3e0"}, @local=@item_4={0x3, 0x2, 0x0, "9d360e65"}, @main, @main=@item_012={0x1, 0x0, 0xa, '~'}]}}, 0x0}, 0x0) 12:18:04 executing program 0: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x80045432, &(0x7f0000000040)) ioctl$TIOCNOTTY(r0, 0x5422) r1 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) dup(r3) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r2, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x39) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r2, 0x0, 0x0) [ 984.145295][T18168] loop3: p1 p2 p3 p4 [ 984.150112][T18168] loop3: p1 start 10 is beyond EOD, truncated [ 984.156700][T18168] loop3: p2 start 25 is beyond EOD, truncated [ 984.162772][T18168] loop3: p3 start 4293001441 is beyond EOD, truncated [ 984.169994][T18168] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:18:05 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0900ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 984.265080][T18168] loop3: p1 p2 p3 p4 [ 984.269346][T18168] loop3: p1 start 10 is beyond EOD, truncated [ 984.275833][T18168] loop3: p2 start 25 is beyond EOD, truncated [ 984.282043][T18168] loop3: p3 start 4293001441 is beyond EOD, truncated [ 984.288832][T18168] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 984.384637][T11066] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 984.405388][T18183] loop3: p1 p2 p3 p4 [ 984.409529][T18183] loop3: p1 start 10 is beyond EOD, truncated [ 984.415820][T18183] loop3: p2 start 25 is beyond EOD, truncated [ 984.421896][T18183] loop3: p3 start 4293001441 is beyond EOD, truncated [ 984.428678][T18183] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:18:05 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0a00ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 984.545105][T18183] loop3: p1 p2 p3 p4 [ 984.550262][T18183] loop3: p1 start 10 is beyond EOD, truncated [ 984.556723][T18183] loop3: p2 start 25 is beyond EOD, truncated [ 984.562816][T18183] loop3: p3 start 4293001441 is beyond EOD, truncated [ 984.569961][T18183] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 984.580112][ T153] loop3: p1 p2 p3 p4 [ 984.584997][ T153] loop3: p1 start 10 is beyond EOD, truncated [ 984.591173][ T153] loop3: p2 start 25 is beyond EOD, truncated [ 984.597880][ T153] loop3: p3 start 4293001441 is beyond EOD, truncated [ 984.604952][ T153] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 984.624655][T11066] usb 3-1: Using ep0 maxpacket: 16 [ 984.725341][T18187] loop3: p1 p2 p3 p4 [ 984.729543][T18187] loop3: p1 start 10 is beyond EOD, truncated [ 984.736228][T18187] loop3: p2 start 25 is beyond EOD, truncated [ 984.742302][T18187] loop3: p3 start 4293001441 is beyond EOD, truncated [ 984.744674][T11066] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 984.749873][T18187] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:18:05 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0b00ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 984.760228][T11066] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 984.776914][T11066] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 984.789744][T11066] usb 3-1: New USB device found, idVendor=0e8f, idProduct=0003, bcdDevice= 0.00 [ 984.798789][T11066] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 984.807411][T11066] usb 3-1: config 0 descriptor?? 12:18:05 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0c00ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 984.876962][T18191] loop3: p1 p2 p3 p4 [ 984.881208][T18191] loop3: p1 start 10 is beyond EOD, truncated [ 984.888775][T18191] loop3: p2 start 25 is beyond EOD, truncated [ 984.895146][T18191] loop3: p3 start 4293001441 is beyond EOD, truncated [ 984.901910][T18191] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 985.005340][T18194] loop3: p1 p2 p3 p4 [ 985.009562][T18194] loop3: p1 start 10 is beyond EOD, truncated [ 985.015686][T18194] loop3: p2 start 25 is beyond EOD, truncated [ 985.021910][T18194] loop3: p3 start 4293001441 is beyond EOD, truncated [ 985.028713][T18194] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:18:05 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0d00ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 985.144695][T11066] usbhid 3-1:0.0: can't add hid device: -71 [ 985.145411][T18197] loop3: p1 p2 p3 p4 [ 985.150753][T11066] usbhid: probe of 3-1:0.0 failed with error -71 [ 985.154958][T18197] loop3: p1 start 10 is beyond EOD, truncated [ 985.163956][T11066] usb 3-1: USB disconnect, device number 22 [ 985.167186][T18197] loop3: p2 start 25 is beyond EOD, truncated [ 985.179075][T18197] loop3: p3 start 4293001441 is beyond EOD, truncated [ 985.185930][T18197] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:18:05 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0e00ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 985.317235][T18200] loop3: p1 p2 p3 p4 [ 985.321400][T18200] loop3: p1 start 10 is beyond EOD, truncated [ 985.327654][T18200] loop3: p2 start 25 is beyond EOD, truncated [ 985.333745][T18200] loop3: p3 start 4293001441 is beyond EOD, truncated [ 985.340645][T18200] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 985.445586][T18200] loop3: p1 p2 p3 p4 [ 985.449834][T18200] loop3: p1 start 10 is beyond EOD, truncated [ 985.456150][T18200] loop3: p2 start 25 is beyond EOD, truncated [ 985.462285][T18200] loop3: p3 start 4293001441 is beyond EOD, truncated [ 985.469368][T18200] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 985.478300][ T153] loop3: p1 p2 p3 p4 [ 985.482465][ T153] loop3: p1 start 10 is beyond EOD, truncated [ 985.489326][ T153] loop3: p2 start 25 is beyond EOD, truncated [ 985.495486][ T153] loop3: p3 start 4293001441 is beyond EOD, truncated [ 985.502277][ T153] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 985.614600][T11066] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 985.854589][T11066] usb 3-1: Using ep0 maxpacket: 16 [ 985.974655][T11066] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 985.985577][T11066] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 985.995538][T11066] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 986.008347][T11066] usb 3-1: New USB device found, idVendor=0e8f, idProduct=0003, bcdDevice= 0.00 [ 986.017461][T11066] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 986.027785][T11066] usb 3-1: config 0 descriptor?? [ 986.764568][T11066] usbhid 3-1:0.0: can't add hid device: -71 [ 986.770559][T11066] usbhid: probe of 3-1:0.0 failed with error -71 [ 986.778885][T11066] usb 3-1: USB disconnect, device number 23 12:18:07 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000640)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe8f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x20}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0xfffffffffffffd58, &(0x7f0000005380)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x1e, {[@main=@item_4={0x3, 0x0, 0x0, "269b771b"}, @global=@item_4={0x3, 0x1, 0x0, "bef90700"}, @main, @main=@item_4={0x3, 0x0, 0x0, "5db5646d"}, @global=@item_4={0x3, 0x1, 0x0, "88fbd3e0"}, @local=@item_4={0x3, 0x2, 0x0, "9d360e65"}, @main=@item_012={0x1, 0x0, 0x0, "a7"}, @main=@item_012={0x1, 0x0, 0xa, '~'}]}}, 0x0}, 0x0) 12:18:07 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac1000ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:18:07 executing program 4: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@private0={0xfc, 0x0, [], 0x1}, 0x6b}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:18:07 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000640)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe8f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x20}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0xfffffffffffffd58, &(0x7f0000005380)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x1f, {[@main=@item_4={0x3, 0x0, 0x0, "269b771b"}, @global=@item_4={0x3, 0x1, 0x0, "bef90700"}, @main=@item_012={0x2, 0x0, 0x0, "aa7a"}, @main=@item_4={0x3, 0x0, 0x0, "5db5646d"}, @global=@item_4={0x3, 0x1, 0x0, "88fbd3e0"}, @local=@item_4={0x3, 0x2, 0x0, "9d360e65"}, @main, @main=@item_012={0x1, 0x0, 0xa, '~'}]}}, 0x0}, 0x0) 12:18:07 executing program 5: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x80045432, &(0x7f0000000040)) ioctl$TIOCNOTTY(r0, 0x5422) r1 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) dup(r3) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r2, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x39) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r2, 0x0, 0x0) 12:18:07 executing program 0: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x80045432, &(0x7f0000000040)) ioctl$TIOCNOTTY(r0, 0x5422) r1 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r2, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x39) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r2, 0x0, 0x0) 12:18:07 executing program 4: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@private0={0xfc, 0x0, [], 0x1}, 0x6b}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:18:07 executing program 4: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@private0={0xfc, 0x0, [], 0x1}, 0x6b}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:18:07 executing program 4: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@private0={0xfc, 0x0, [], 0x1}, 0x6b}) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, 0x0, 0x0, 0x0) 12:18:08 executing program 4: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@private0={0xfc, 0x0, [], 0x1}, 0x6b}) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, 0x0, 0x0, 0x0) 12:18:08 executing program 4: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@private0={0xfc, 0x0, [], 0x1}, 0x6b}) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, 0x0, 0x0, 0x0) [ 987.270436][T18219] loop3: p1 p2 p3 p4 [ 987.279485][T18219] loop3: p1 start 10 is beyond EOD, truncated [ 987.290369][T18219] loop3: p2 start 25 is beyond EOD, truncated [ 987.296513][T18219] loop3: p3 start 4293001441 is beyond EOD, truncated [ 987.305996][T18219] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:18:08 executing program 4: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = gettid() r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@private0={0xfc, 0x0, [], 0x1}, 0x6b}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 987.494503][ T113] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 987.734499][ T113] usb 3-1: Using ep0 maxpacket: 16 [ 987.854538][ T113] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 987.865457][ T113] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 987.875792][ T113] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 987.889082][ T113] usb 3-1: New USB device found, idVendor=0e8f, idProduct=0003, bcdDevice= 0.00 [ 987.898490][ T113] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 987.907373][ T113] usb 3-1: config 0 descriptor?? [ 988.244488][ T113] usbhid 3-1:0.0: can't add hid device: -71 [ 988.250482][ T113] usbhid: probe of 3-1:0.0 failed with error -71 [ 988.257735][ T113] usb 3-1: USB disconnect, device number 24 [ 988.714436][ T113] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 988.954430][ T113] usb 3-1: Using ep0 maxpacket: 16 [ 989.074477][ T113] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 989.085423][ T113] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 989.095475][ T113] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 989.108297][ T113] usb 3-1: New USB device found, idVendor=0e8f, idProduct=0003, bcdDevice= 0.00 [ 989.117366][ T113] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 989.126079][ T113] usb 3-1: config 0 descriptor?? [ 989.864423][ T113] usbhid 3-1:0.0: can't add hid device: -71 [ 989.870402][ T113] usbhid: probe of 3-1:0.0 failed with error -71 [ 989.878609][ T113] usb 3-1: USB disconnect, device number 25 12:18:11 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000640)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe8f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x20}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0xfffffffffffffd58, &(0x7f0000005380)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x1e, {[@main=@item_4={0x3, 0x0, 0x0, "269b771b"}, @global=@item_4={0x3, 0x1, 0x0, "bef90700"}, @main, @main=@item_4={0x3, 0x0, 0x0, "5db5646d"}, @global=@item_4={0x3, 0x1, 0x0, "88fbd3e0"}, @local=@item_4={0x3, 0x2, 0x0, "9d360e65"}, @main=@item_012={0x1, 0x0, 0x0, "a7"}, @main=@item_012={0x1, 0x0, 0xa, '~'}]}}, 0x0}, 0x0) 12:18:11 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac1100ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:18:11 executing program 4: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = gettid() r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@private0={0xfc, 0x0, [], 0x1}, 0x6b}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:18:11 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="a3286fd2dfffbbbbbbbbbbbb8100000086dd60163dac0a008800fe9ea3"], 0x3a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) 12:18:11 executing program 5: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x80045432, &(0x7f0000000040)) ioctl$TIOCNOTTY(r0, 0x5422) r1 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) dup(r3) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r2, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x39) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r2, 0x0, 0x0) 12:18:11 executing program 0: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x80045432, &(0x7f0000000040)) ioctl$TIOCNOTTY(r0, 0x5422) r1 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r2, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x39) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r2, 0x0, 0x0) 12:18:11 executing program 4: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = gettid() r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@private0={0xfc, 0x0, [], 0x1}, 0x6b}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:18:11 executing program 4: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@private0={0xfc, 0x0, [], 0x1}, 0x6b}) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(0x0, 0x39) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 990.354942][T18270] loop3: p1 p2 p3 p4 [ 990.361413][T18270] loop3: p1 start 10 is beyond EOD, truncated [ 990.370358][T18270] loop3: p2 start 25 is beyond EOD, truncated [ 990.377144][T18270] loop3: p3 start 4293001441 is beyond EOD, truncated [ 990.386982][T18270] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:18:11 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac1200ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 990.465081][T18270] loop3: p1 p2 p3 p4 [ 990.469812][T18270] loop3: p1 start 10 is beyond EOD, truncated [ 990.476131][T18270] loop3: p2 start 25 is beyond EOD, truncated [ 990.482545][T18270] loop3: p3 start 4293001441 is beyond EOD, truncated [ 990.489447][T18270] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 990.498863][ T153] loop3: p1 p2 p3 p4 [ 990.504102][ T153] loop3: p1 start 10 is beyond EOD, truncated [ 990.510817][ T153] loop3: p2 start 25 is beyond EOD, truncated [ 990.517259][ T153] loop3: p3 start 4293001441 is beyond EOD, truncated [ 990.524525][ T153] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 990.614441][ T113] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 990.623943][T18290] loop3: p1 p2 p3 p4 [ 990.629339][T18290] loop3: p1 start 10 is beyond EOD, truncated [ 990.636126][T18290] loop3: p2 start 25 is beyond EOD, truncated [ 990.642538][T18290] loop3: p3 start 4293001441 is beyond EOD, truncated [ 990.649875][T18290] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 990.754822][T18290] loop3: p1 p2 p3 p4 [ 990.759285][T18290] loop3: p1 start 10 is beyond EOD, truncated [ 990.767114][T18290] loop3: p2 start 25 is beyond EOD, truncated [ 990.773550][T18290] loop3: p3 start 4293001441 is beyond EOD, truncated [ 990.780522][T18290] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:18:11 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac1300ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 990.825207][ T153] loop3: p1 p2 p3 p4 [ 990.830463][ T153] loop3: p1 start 10 is beyond EOD, truncated [ 990.837457][ T153] loop3: p2 start 25 is beyond EOD, truncated [ 990.843855][ T153] loop3: p3 start 4293001441 is beyond EOD, truncated [ 990.851556][ T153] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 990.874385][ T113] usb 3-1: Using ep0 maxpacket: 16 [ 990.984878][T18294] loop3: p1 p2 p3 p4 [ 990.989060][T18294] loop3: p1 start 10 is beyond EOD, truncated [ 990.995684][T18294] loop3: p2 start 25 is beyond EOD, truncated [ 991.001904][T18294] loop3: p3 start 4293001441 is beyond EOD, truncated [ 991.008985][T18294] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 991.014543][ T113] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 991.028072][ T113] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 991.028523][ T153] loop3: p1 p2 p3 p4 [ 991.038022][ T113] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 991.038045][ T113] usb 3-1: New USB device found, idVendor=0e8f, idProduct=0003, bcdDevice= 0.00 [ 991.044604][ T153] loop3: p1 start 10 is beyond EOD, truncated [ 991.055050][ T113] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 991.065130][ T153] loop3: p2 start 25 is beyond EOD, truncated [ 991.071019][ T113] usb 3-1: config 0 descriptor?? [ 991.080064][ T153] loop3: p3 start 4293001441 is beyond EOD, truncated [ 991.097347][ T153] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:18:11 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac2200ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:18:11 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000640)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe8f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x20}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0xfffffffffffffd58, &(0x7f0000005380)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x20, {[@main=@item_4={0x3, 0x0, 0x0, "269b771b"}, @global=@item_4={0x3, 0x1, 0x0, "bef90700"}, @main=@item_012={0x2, 0x0, 0x0, "aa7a"}, @main=@item_4={0x3, 0x0, 0x0, "5db5646d"}, @global=@item_4={0x3, 0x1, 0x0, "88fbd3e0"}, @local=@item_4={0x3, 0x2, 0x0, "9d360e65"}, @main=@item_012={0x1, 0x0, 0x0, "a7"}, @main=@item_012={0x1, 0x0, 0x0, '~'}]}}, 0x0}, 0x0) [ 991.203873][T18297] loop3: p1 p2 p3 p4 [ 991.208559][T18297] loop3: p1 start 10 is beyond EOD, truncated [ 991.214927][T18297] loop3: p2 start 25 is beyond EOD, truncated [ 991.221360][T18297] loop3: p3 start 4293001441 is beyond EOD, truncated [ 991.228800][T18297] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 991.444445][ T113] usbhid 3-1:0.0: can't add hid device: -71 [ 991.450827][ T113] usbhid: probe of 3-1:0.0 failed with error -71 [ 991.458522][ T113] usb 3-1: USB disconnect, device number 26 [ 991.914292][ T113] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 992.154312][ T113] usb 3-1: Using ep0 maxpacket: 16 [ 992.274334][ T113] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 992.285540][ T113] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 992.296268][ T113] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 992.309774][ T113] usb 3-1: New USB device found, idVendor=0e8f, idProduct=0003, bcdDevice= 0.00 [ 992.319210][ T113] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 992.328948][ T113] usb 3-1: config 0 descriptor?? [ 993.064336][ T113] usbhid 3-1:0.0: can't add hid device: -71 [ 993.070440][ T113] usbhid: probe of 3-1:0.0 failed with error -71 [ 993.078630][ T113] usb 3-1: USB disconnect, device number 27 12:18:14 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000640)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe8f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x20}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0xfffffffffffffd58, &(0x7f0000005380)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x1e, {[@main=@item_4={0x3, 0x0, 0x0, "269b771b"}, @global=@item_4={0x3, 0x1, 0x0, "bef90700"}, @main, @main=@item_4={0x3, 0x0, 0x0, "5db5646d"}, @global=@item_4={0x3, 0x1, 0x0, "88fbd3e0"}, @local=@item_4={0x3, 0x2, 0x0, "9d360e65"}, @main=@item_012={0x1, 0x0, 0x0, "a7"}, @main=@item_012={0x1, 0x0, 0xa, '~'}]}}, 0x0}, 0x0) 12:18:14 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac2400ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:18:14 executing program 5: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x80045432, &(0x7f0000000040)) ioctl$TIOCNOTTY(r0, 0x5422) r1 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) dup(r3) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r2, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x39) ptrace$cont(0x9, r2, 0x0, 0x0) 12:18:14 executing program 0: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x80045432, &(0x7f0000000040)) ioctl$TIOCNOTTY(r0, 0x5422) r1 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r2, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x39) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r2, 0x0, 0x0) 12:18:14 executing program 4: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@private0={0xfc, 0x0, [], 0x1}, 0x6b}) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(0x0, 0x39) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 993.575326][T18315] loop3: p1 p2 p3 p4 [ 993.579923][T18315] loop3: p1 start 10 is beyond EOD, truncated [ 993.587119][T18315] loop3: p2 start 25 is beyond EOD, truncated [ 993.593435][T18315] loop3: p3 start 4293001441 is beyond EOD, truncated [ 993.600678][T18315] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:18:14 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac2500ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 993.704815][T18315] loop3: p1 p2 p3 p4 [ 993.709119][T18315] loop3: p1 start 10 is beyond EOD, truncated [ 993.716163][T18315] loop3: p2 start 25 is beyond EOD, truncated [ 993.722864][T18315] loop3: p3 start 4293001441 is beyond EOD, truncated [ 993.730412][T18315] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 993.794224][ T113] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 993.884824][T18331] loop3: p1 p2 p3 p4 [ 993.889116][T18331] loop3: p1 start 10 is beyond EOD, truncated [ 993.895987][T18331] loop3: p2 start 25 is beyond EOD, truncated [ 993.902318][T18331] loop3: p3 start 4293001441 is beyond EOD, truncated [ 993.909591][T18331] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:18:14 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac4800ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 994.016409][T18334] loop3: p1 p2 p3 p4 [ 994.021185][T18334] loop3: p1 start 10 is beyond EOD, truncated [ 994.027558][T18334] loop3: p2 start 25 is beyond EOD, truncated [ 994.033812][T18334] loop3: p3 start 4293001441 is beyond EOD, truncated [ 994.034204][ T113] usb 3-1: Using ep0 maxpacket: 16 [ 994.040609][T18334] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:18:14 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac4c00ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 994.124724][T18334] loop3: p1 p2 p3 p4 [ 994.129146][T18334] loop3: p1 start 10 is beyond EOD, truncated [ 994.135507][T18334] loop3: p2 start 25 is beyond EOD, truncated [ 994.141800][T18334] loop3: p3 start 4293001441 is beyond EOD, truncated [ 994.148717][T18334] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:18:14 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000640)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe8f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x20}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0xfffffffffffffd58, &(0x7f0000005380)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x20, {[@main=@item_4={0x3, 0x0, 0x0, "269b771b"}, @global=@item_4={0x3, 0x1, 0x0, "bef90700"}, @main=@item_012={0x2, 0x0, 0x0, "aa7a"}, @main=@item_4={0x3, 0x0, 0x0, "5db5646d"}, @global=@item_4={0x3, 0x1, 0x0, "88fbd3e0"}, @local=@item_4={0x3, 0x2, 0x0, "9d360e65"}, @main=@item_012={0x1, 0x0, 0x0, "a7"}, @main=@item_012={0x1, 0x0, 0x0, '~'}]}}, 0x0}, 0x0) [ 994.164344][ T113] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 994.175810][ T113] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 994.188982][ T113] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 994.206525][ T113] usb 3-1: New USB device found, idVendor=0e8f, idProduct=0003, bcdDevice= 0.00 [ 994.216263][ T113] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 994.225230][ T113] usb 3-1: config 0 descriptor?? 12:18:15 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac6000ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 994.307534][T18338] loop3: p1 p2 p3 p4 [ 994.312090][T18338] loop3: p1 start 10 is beyond EOD, truncated [ 994.318756][T18338] loop3: p2 start 25 is beyond EOD, truncated [ 994.325487][T18338] loop3: p3 start 4293001441 is beyond EOD, truncated [ 994.332543][T18338] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:18:15 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac6800ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 994.424569][T18345] loop3: p1 p2 p3 p4 [ 994.429060][T18345] loop3: p1 start 10 is beyond EOD, truncated [ 994.435929][T18345] loop3: p2 start 25 is beyond EOD, truncated [ 994.442207][T18345] loop3: p3 start 4293001441 is beyond EOD, truncated [ 994.449379][T18345] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 994.534870][T18348] loop3: p1 p2 p3 p4 [ 994.539358][T18348] loop3: p1 start 10 is beyond EOD, truncated [ 994.546160][T18348] loop3: p2 start 25 is beyond EOD, truncated [ 994.552442][T18348] loop3: p3 start 4293001441 is beyond EOD, truncated [ 994.559379][T18348] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 994.566851][ T113] usbhid 3-1:0.0: can't add hid device: -71 [ 994.573143][ T113] usbhid: probe of 3-1:0.0 failed with error -71 [ 994.580948][ T113] usb 3-1: USB disconnect, device number 28 12:18:15 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac6c00ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 994.646068][T18348] loop3: p1 p2 p3 p4 [ 994.650536][T18348] loop3: p1 start 10 is beyond EOD, truncated [ 994.657555][T18348] loop3: p2 start 25 is beyond EOD, truncated [ 994.664067][T18348] loop3: p3 start 4293001441 is beyond EOD, truncated [ 994.671582][T18348] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 994.681158][ T153] loop3: p1 p2 p3 p4 [ 994.686936][ T153] loop3: p1 start 10 is beyond EOD, truncated [ 994.693870][ T153] loop3: p2 start 25 is beyond EOD, truncated [ 994.700398][ T153] loop3: p3 start 4293001441 is beyond EOD, truncated [ 994.707860][ T153] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 994.797238][T18352] loop3: p1 p2 p3 p4 [ 994.801987][T18352] loop3: p1 start 10 is beyond EOD, truncated [ 994.808635][T18352] loop3: p2 start 25 is beyond EOD, truncated [ 994.814939][T18352] loop3: p3 start 4293001441 is beyond EOD, truncated [ 994.822280][T18352] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 994.924875][T18352] loop3: p1 p2 p3 p4 [ 994.929224][T18352] loop3: p1 start 10 is beyond EOD, truncated [ 994.935460][T18352] loop3: p2 start 25 is beyond EOD, truncated [ 994.941686][T18352] loop3: p3 start 4293001441 is beyond EOD, truncated [ 994.948652][T18352] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 995.054193][ T113] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 995.294143][ T113] usb 3-1: Using ep0 maxpacket: 16 [ 995.414252][ T113] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 995.425320][ T113] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 995.435873][ T113] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 995.449092][ T113] usb 3-1: New USB device found, idVendor=0e8f, idProduct=0003, bcdDevice= 0.00 [ 995.458698][ T113] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 995.467898][ T113] usb 3-1: config 0 descriptor?? [ 996.204145][ T113] usbhid 3-1:0.0: can't add hid device: -71 [ 996.210320][ T113] usbhid: probe of 3-1:0.0 failed with error -71 [ 996.218318][ T113] usb 3-1: USB disconnect, device number 29 12:18:17 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000640)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe8f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x20}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0xfffffffffffffd58, &(0x7f0000005380)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x1f, {[@main=@item_4={0x3, 0x0, 0x0, "269b771b"}, @global=@item_4={0x3, 0x1, 0x0, "bef90700"}, @main=@item_012={0x1, 0x0, 0x0, "aa"}, @main=@item_4={0x3, 0x0, 0x0, "5db5646d"}, @global=@item_4={0x3, 0x1, 0x0, "88fbd3e0"}, @local=@item_4={0x3, 0x2, 0x0, "9d360e65"}, @main=@item_012={0x1, 0x0, 0x0, "a7"}, @main=@item_012={0x1, 0x0, 0xa, '~'}]}}, 0x0}, 0x0) 12:18:17 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac7400ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:18:17 executing program 4: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@private0={0xfc, 0x0, [], 0x1}, 0x6b}) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(0x0, 0x39) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 12:18:17 executing program 5: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x80045432, &(0x7f0000000040)) ioctl$TIOCNOTTY(r0, 0x5422) r1 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) dup(r3) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r2, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x39) ptrace$cont(0x9, r2, 0x0, 0x0) 12:18:17 executing program 0: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x80045432, &(0x7f0000000040)) ioctl$TIOCNOTTY(r0, 0x5422) r1 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r2, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x39) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r2, 0x0, 0x0) 12:18:17 executing program 5: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x80045432, &(0x7f0000000040)) ioctl$TIOCNOTTY(r0, 0x5422) r1 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) dup(r3) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r2, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x39) ptrace$cont(0x9, r2, 0x0, 0x0) 12:18:17 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac7a00ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 996.711873][T18372] loop3: p1 p2 p3 p4 [ 996.716237][T18372] loop3: p1 start 10 is beyond EOD, truncated [ 996.722565][T18372] loop3: p2 start 25 is beyond EOD, truncated [ 996.729641][T18372] loop3: p3 start 4293001441 is beyond EOD, truncated [ 996.737167][T18372] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 996.854738][T18383] loop3: p1 p2 p3 p4 [ 996.859035][T18383] loop3: p1 start 10 is beyond EOD, truncated [ 996.865987][T18383] loop3: p2 start 25 is beyond EOD, truncated [ 996.872370][T18383] loop3: p3 start 4293001441 is beyond EOD, truncated [ 996.879598][T18383] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 996.934083][T11066] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 996.966683][T18383] loop3: p1 p2 p3 p4 [ 996.971102][T18383] loop3: p1 start 10 is beyond EOD, truncated [ 996.978273][T18383] loop3: p2 start 25 is beyond EOD, truncated 12:18:17 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac9000ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 996.984880][T18383] loop3: p3 start 4293001441 is beyond EOD, truncated [ 996.991849][T18383] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 997.001776][ T153] loop3: p1 p2 p3 p4 [ 997.006423][ T153] loop3: p1 start 10 is beyond EOD, truncated [ 997.012775][ T153] loop3: p2 start 25 is beyond EOD, truncated [ 997.019833][ T153] loop3: p3 start 4293001441 is beyond EOD, truncated [ 997.027011][ T153] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 997.128066][T18387] loop3: p1 p2 p3 p4 [ 997.132438][T18387] loop3: p1 start 10 is beyond EOD, truncated [ 997.139001][T18387] loop3: p2 start 25 is beyond EOD, truncated [ 997.145462][T18387] loop3: p3 start 4293001441 is beyond EOD, truncated [ 997.152682][T18387] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 997.194172][T11066] usb 3-1: Using ep0 maxpacket: 16 12:18:17 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000640)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe8f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x20}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0xfffffffffffffd58, &(0x7f0000005380)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x20, {[@main=@item_4={0x3, 0x0, 0x0, "269b771b"}, @global=@item_4={0x3, 0x1, 0x0, "bef90700"}, @main=@item_012={0x2, 0x0, 0x0, "aa7a"}, @main=@item_4={0x3, 0x0, 0x0, "5db5646d"}, @global=@item_4={0x3, 0x1, 0x0, "88fbd3e0"}, @local=@item_4={0x3, 0x2, 0x0, "9d360e65"}, @main=@item_012={0x1, 0x0, 0x0, "a7"}, @main=@item_012={0x1, 0x0, 0x0, '~'}]}}, 0x0}, 0x0) 12:18:17 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0402ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 997.234976][T18387] loop3: p1 p2 p3 p4 [ 997.243523][T18387] loop3: p1 start 10 is beyond EOD, truncated [ 997.251898][T18387] loop3: p2 start 25 is beyond EOD, truncated [ 997.258556][T18387] loop3: p3 start 4293001441 is beyond EOD, truncated [ 997.265668][T18387] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 997.334139][T11066] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 997.345837][T11066] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 997.356253][T11066] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 997.371184][T11066] usb 3-1: New USB device found, idVendor=0e8f, idProduct=0003, bcdDevice= 0.00 [ 997.380676][T11066] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 997.389425][T11066] usb 3-1: config 0 descriptor?? 12:18:18 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0003ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:18:18 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0204ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 997.774128][T11066] usbhid 3-1:0.0: can't add hid device: -71 [ 997.780437][T11066] usbhid: probe of 3-1:0.0 failed with error -71 [ 997.788829][T11066] usb 3-1: USB disconnect, device number 30 [ 998.244035][T11066] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 998.484003][T11066] usb 3-1: Using ep0 maxpacket: 16 [ 998.604069][T11066] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 998.615498][T11066] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 998.625752][T11066] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 998.638986][T11066] usb 3-1: New USB device found, idVendor=0e8f, idProduct=0003, bcdDevice= 0.00 [ 998.648377][T11066] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 998.657284][T11066] usb 3-1: config 0 descriptor?? [ 999.384010][T11066] usbhid 3-1:0.0: can't add hid device: -71 [ 999.390307][T11066] usbhid: probe of 3-1:0.0 failed with error -71 [ 999.398567][T11066] usb 3-1: USB disconnect, device number 31 12:18:20 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000640)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe8f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x20}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0xfffffffffffffd58, &(0x7f0000005380)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x1f, {[@main=@item_4={0x3, 0x0, 0x0, "269b771b"}, @global=@item_4={0x3, 0x1, 0x0, "bef90700"}, @main=@item_012={0x1, 0x0, 0x0, "aa"}, @main=@item_4={0x3, 0x0, 0x0, "5db5646d"}, @global=@item_4={0x3, 0x1, 0x0, "88fbd3e0"}, @local=@item_4={0x3, 0x2, 0x0, "9d360e65"}, @main=@item_012={0x1, 0x0, 0x0, "a7"}, @main=@item_012={0x1, 0x0, 0xa, '~'}]}}, 0x0}, 0x0) 12:18:20 executing program 4: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@private0={0xfc, 0x0, [], 0x1}, 0x6b}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:18:20 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0604ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:18:20 executing program 5: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x80045432, &(0x7f0000000040)) ioctl$TIOCNOTTY(r0, 0x5422) gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) dup(r2) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:18:20 executing program 0: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x80045432, &(0x7f0000000040)) ioctl$TIOCNOTTY(r0, 0x5422) r1 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r2, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x39) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r2, 0x0, 0x0) 12:18:20 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac8004ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:18:20 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45acf504ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:18:20 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0005ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1000.113964][ T113] usb 3-1: new high-speed USB device number 32 using dummy_hcd 12:18:20 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000640)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe8f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x20}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0xfffffffffffffd58, &(0x7f0000005380)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x1f, {[@main=@item_4={0x3, 0x0, 0x0, "269b771b"}, @global=@item_4={0x3, 0x1, 0x0, "bef90700"}, @main=@item_012={0x1, 0x0, 0x0, "aa"}, @main=@item_4={0x3, 0x0, 0x0, "5db5646d"}, @global=@item_4={0x3, 0x1, 0x0, "88fbd3e0"}, @local=@item_4={0x3, 0x2, 0x0, "9d360e65"}, @main=@item_012={0x1, 0x0, 0x0, "a7"}, @main=@item_012={0x1, 0x0, 0xa, '~'}]}}, 0x0}, 0x0) 12:18:20 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0006ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:18:21 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0406ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:18:21 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0007ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1000.353891][ T113] usb 3-1: Using ep0 maxpacket: 16 [ 1000.474032][ T113] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1000.486157][ T113] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1000.496013][ T113] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1000.509086][ T113] usb 3-1: New USB device found, idVendor=0e8f, idProduct=0003, bcdDevice= 0.00 [ 1000.518458][ T113] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1000.528627][ T113] usb 3-1: config 0 descriptor?? [ 1000.873944][ T113] usbhid 3-1:0.0: can't add hid device: -71 [ 1000.879986][ T113] usbhid: probe of 3-1:0.0 failed with error -71 [ 1000.888220][ T113] usb 3-1: USB disconnect, device number 32 [ 1001.343889][ T113] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 1001.583849][ T113] usb 3-1: Using ep0 maxpacket: 16 [ 1001.703919][ T113] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1001.714872][ T113] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1001.725266][ T113] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1001.738606][ T113] usb 3-1: New USB device found, idVendor=0e8f, idProduct=0003, bcdDevice= 0.00 [ 1001.748035][ T113] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1001.756972][ T113] usb 3-1: config 0 descriptor?? [ 1002.503828][ T113] usbhid 3-1:0.0: can't add hid device: -71 [ 1002.509861][ T113] usbhid: probe of 3-1:0.0 failed with error -71 [ 1002.518233][ T113] usb 3-1: USB disconnect, device number 33 12:18:23 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000640)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe8f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x20}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0xfffffffffffffd58, &(0x7f0000005380)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x1f, {[@main=@item_4={0x3, 0x0, 0x0, "269b771b"}, @global=@item_4={0x3, 0x1, 0x0, "bef90700"}, @main=@item_012={0x1, 0x0, 0x0, "aa"}, @main=@item_4={0x3, 0x0, 0x0, "5db5646d"}, @global=@item_4={0x3, 0x1, 0x0, "88fbd3e0"}, @local=@item_4={0x3, 0x2, 0x0, "9d360e65"}, @main=@item_012={0x1, 0x0, 0x0, "a7"}, @main=@item_012={0x1, 0x0, 0xa, '~'}]}}, 0x0}, 0x0) 12:18:23 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0009ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:18:23 executing program 4: r0 = gettid() clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@private0={0xfc, 0x0, [], 0x1}, 0x6b}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:18:23 executing program 0: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x80045432, &(0x7f0000000040)) ioctl$TIOCNOTTY(r0, 0x5422) r1 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r2, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x39) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r2, 0x0, 0x0) 12:18:23 executing program 5: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x80045432, &(0x7f0000000040)) ioctl$TIOCNOTTY(r0, 0x5422) gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) dup(r2) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:18:23 executing program 5: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x80045432, &(0x7f0000000040)) ioctl$TIOCNOTTY(r0, 0x5422) gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) dup(r2) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:18:23 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac000affffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:18:23 executing program 4: r0 = gettid() clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@private0={0xfc, 0x0, [], 0x1}, 0x6b}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:18:23 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000640)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe8f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x20}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0xfffffffffffffd58, &(0x7f0000005380)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x1f, {[@main=@item_4={0x3, 0x0, 0x0, "269b771b"}, @global=@item_4={0x3, 0x1, 0x0, "bef90700"}, @main=@item_012={0x1, 0x0, 0x0, "aa"}, @main=@item_4={0x3, 0x0, 0x0, "5db5646d"}, @global=@item_4={0x3, 0x1, 0x0, "88fbd3e0"}, @local=@item_4={0x3, 0x2, 0x0, "9d360e65"}, @main=@item_012={0x1, 0x0, 0x0, "a7"}, @main=@item_012={0x1, 0x0, 0xa, '~'}]}}, 0x0}, 0x0) 12:18:23 executing program 5: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x80045432, &(0x7f0000000040)) ioctl$TIOCNOTTY(r0, 0x5422) r1 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) dup(r3) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r1, 0x39) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r2, 0x0, 0x0) 12:18:23 executing program 4: r0 = gettid() clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@private0={0xfc, 0x0, [], 0x1}, 0x6b}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:18:23 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac000bffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1003.223722][ T113] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 1003.463707][ T113] usb 3-1: Using ep0 maxpacket: 16 [ 1003.603763][ T113] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1003.614675][ T113] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1003.625037][ T113] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1003.638331][ T113] usb 3-1: New USB device found, idVendor=0e8f, idProduct=0003, bcdDevice= 0.00 [ 1003.647764][ T113] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1003.656715][ T113] usb 3-1: config 0 descriptor?? [ 1004.003698][ T113] usbhid 3-1:0.0: can't add hid device: -71 [ 1004.009706][ T113] usbhid: probe of 3-1:0.0 failed with error -71 [ 1004.017986][ T113] usb 3-1: USB disconnect, device number 34 [ 1004.473584][ T113] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 1004.713550][ T113] usb 3-1: Using ep0 maxpacket: 16 [ 1004.833588][ T113] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1004.844513][ T113] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1004.854888][ T113] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1004.868137][ T113] usb 3-1: New USB device found, idVendor=0e8f, idProduct=0003, bcdDevice= 0.00 [ 1004.877480][ T113] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1004.886279][ T113] usb 3-1: config 0 descriptor?? [ 1005.623460][ T113] usbhid 3-1:0.0: can't add hid device: -71 [ 1005.629453][ T113] usbhid: probe of 3-1:0.0 failed with error -71 [ 1005.637582][ T113] usb 3-1: USB disconnect, device number 35 12:18:26 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000640)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe8f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x20}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0xfffffffffffffd58, &(0x7f0000005380)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x1b, {[@main=@item_4={0x3, 0x0, 0x0, "269b771b"}, @main=@item_012={0x2, 0x0, 0x0, "aa7a"}, @main=@item_4={0x3, 0x0, 0x0, "5db5646d"}, @global=@item_4={0x3, 0x1, 0x0, "88fbd3e0"}, @local=@item_4={0x3, 0x2, 0x0, "9d360e65"}, @main=@item_012={0x1, 0x0, 0x0, "a7"}, @main=@item_012={0x1, 0x0, 0xa, '~'}]}}, 0x0}, 0x0) 12:18:26 executing program 4: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@private0={0xfc, 0x0, [], 0x1}, 0x6b}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:18:26 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac000cffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:18:26 executing program 0: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x80045432, &(0x7f0000000040)) ioctl$TIOCNOTTY(r0, 0x5422) r1 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() r3 = socket$packet(0x11, 0x2, 0x300) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r2, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x39) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r2, 0x0, 0x0) 12:18:26 executing program 4: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@private0={0xfc, 0x0, [], 0x1}, 0x6b}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:18:26 executing program 4: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@private0={0xfc, 0x0, [], 0x1}, 0x6b}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:18:26 executing program 0: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x80045432, &(0x7f0000000040)) ioctl$TIOCNOTTY(r0, 0x5422) r1 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() r3 = socket$packet(0x11, 0x2, 0x300) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r2, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x39) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r2, 0x0, 0x0) 12:18:26 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac000dffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:18:26 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000640)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe8f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x20}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0xfffffffffffffd58, &(0x7f0000005380)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x1f, {[@main=@item_4={0x3, 0x0, 0x0, "269b771b"}, @global=@item_4={0x3, 0x1, 0x0, "bef90700"}, @main=@item_012={0x1, 0x0, 0x0, "aa"}, @main=@item_4={0x3, 0x0, 0x0, "5db5646d"}, @global=@item_4={0x3, 0x1, 0x0, "88fbd3e0"}, @local=@item_4={0x3, 0x2, 0x0, "9d360e65"}, @main=@item_012={0x1, 0x0, 0x0, "a7"}, @main=@item_012={0x1, 0x0, 0xa, '~'}]}}, 0x0}, 0x0) 12:18:27 executing program 5: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x80045432, &(0x7f0000000040)) ioctl$TIOCNOTTY(r0, 0x5422) r1 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) dup(r3) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r1, 0x39) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r2, 0x0, 0x0) 12:18:27 executing program 4: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@private0={0xfc, 0x0, [], 0x1}, 0x6b}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:18:27 executing program 0: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x80045432, &(0x7f0000000040)) ioctl$TIOCNOTTY(r0, 0x5422) r1 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() r3 = socket$packet(0x11, 0x2, 0x300) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r2, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x39) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r2, 0x0, 0x0) [ 1006.353368][ T113] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 1006.593319][ T113] usb 3-1: Using ep0 maxpacket: 16 [ 1006.713368][ T113] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1006.724503][ T113] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1006.734923][ T113] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1006.748092][ T113] usb 3-1: New USB device found, idVendor=0e8f, idProduct=0003, bcdDevice= 0.00 [ 1006.757444][ T113] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1006.766441][ T113] usb 3-1: config 0 descriptor?? [ 1007.093310][ T113] usbhid 3-1:0.0: can't add hid device: -71 [ 1007.099322][ T113] usbhid: probe of 3-1:0.0 failed with error -71 [ 1007.107330][ T113] usb 3-1: USB disconnect, device number 36 [ 1007.563229][ T113] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 1007.803202][ T113] usb 3-1: Using ep0 maxpacket: 16 [ 1007.923266][ T113] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1007.934146][ T113] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1007.944534][ T113] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1007.957731][ T113] usb 3-1: New USB device found, idVendor=0e8f, idProduct=0003, bcdDevice= 0.00 [ 1007.967072][ T113] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1007.976096][ T113] usb 3-1: config 0 descriptor?? [ 1008.713125][ T113] usbhid 3-1:0.0: can't add hid device: -71 [ 1008.719135][ T113] usbhid: probe of 3-1:0.0 failed with error -71 [ 1008.727276][ T113] usb 3-1: USB disconnect, device number 37 12:18:29 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000640)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe8f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x20}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0xfffffffffffffd58, &(0x7f0000005380)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x1b, {[@main=@item_4={0x3, 0x0, 0x0, "269b771b"}, @main=@item_012={0x2, 0x0, 0x0, "aa7a"}, @main=@item_4={0x3, 0x0, 0x0, "5db5646d"}, @global=@item_4={0x3, 0x1, 0x0, "88fbd3e0"}, @local=@item_4={0x3, 0x2, 0x0, "9d360e65"}, @main=@item_012={0x1, 0x0, 0x0, "a7"}, @main=@item_012={0x1, 0x0, 0xa, '~'}]}}, 0x0}, 0x0) 12:18:29 executing program 0: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x80045432, &(0x7f0000000040)) ioctl$TIOCNOTTY(r0, 0x5422) r1 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x39) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, 0x0, 0x0, 0x0) 12:18:29 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac000effffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:18:29 executing program 0: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x80045432, &(0x7f0000000040)) ioctl$TIOCNOTTY(r0, 0x5422) r1 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x39) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, 0x0, 0x0, 0x0) 12:18:29 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0011ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:18:30 executing program 0: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x80045432, &(0x7f0000000040)) ioctl$TIOCNOTTY(r0, 0x5422) r1 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x39) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, 0x0, 0x0, 0x0) 12:18:30 executing program 4: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@private0={0xfc, 0x0, [], 0x1}, 0x6b}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:18:30 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000640)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe8f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x20}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0xfffffffffffffd58, &(0x7f0000005380)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x20, {[@main=@item_4={0x3, 0x0, 0x0, "269b771b"}, @global=@item_4={0x3, 0x1, 0x0, "bef90700"}, @main=@item_012={0x2, 0x0, 0x0, "aa7a"}, @main=@item_4={0x3, 0x0, 0x0, "5db5646d"}, @global=@item_4={0x3, 0x1, 0x0, "88fbd3e0"}, @local=@item_4={0x3, 0x2, 0x0, "9d360e65"}, @main=@item_012={0x1, 0x0, 0x0, "a7"}, @main=@item_012={0x1, 0x0, 0x0, '~'}]}}, 0x0}, 0x0) 12:18:30 executing program 5: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x80045432, &(0x7f0000000040)) ioctl$TIOCNOTTY(r0, 0x5422) r1 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) dup(r3) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r1, 0x39) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r2, 0x0, 0x0) 12:18:30 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0012ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:18:30 executing program 0: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x80045432, &(0x7f0000000040)) ioctl$TIOCNOTTY(r0, 0x5422) r1 = gettid() r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r2, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x39) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r2, 0x0, 0x0) 12:18:30 executing program 0: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x80045432, &(0x7f0000000040)) ioctl$TIOCNOTTY(r0, 0x5422) r1 = gettid() r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r2, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x39) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r2, 0x0, 0x0) [ 1009.433015][ T113] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 1009.672970][ T113] usb 3-1: Using ep0 maxpacket: 16 [ 1009.793016][ T113] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1009.803999][ T113] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1009.814368][ T113] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1009.827558][ T113] usb 3-1: New USB device found, idVendor=0e8f, idProduct=0003, bcdDevice= 0.00 [ 1009.837061][ T113] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1009.846100][ T113] usb 3-1: config 0 descriptor?? [ 1010.183008][ T113] usbhid 3-1:0.0: can't add hid device: -71 [ 1010.189014][ T113] usbhid: probe of 3-1:0.0 failed with error -71 [ 1010.197265][ T113] usb 3-1: USB disconnect, device number 38 [ 1010.652856][ T113] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 1010.892824][ T113] usb 3-1: Using ep0 maxpacket: 16 [ 1011.012870][ T113] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1011.023861][ T113] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1011.034191][ T113] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1011.047370][ T113] usb 3-1: New USB device found, idVendor=0e8f, idProduct=0003, bcdDevice= 0.00 [ 1011.056746][ T113] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1011.065616][ T113] usb 3-1: config 0 descriptor?? [ 1011.802763][ T113] usbhid 3-1:0.0: can't add hid device: -71 [ 1011.808756][ T113] usbhid: probe of 3-1:0.0 failed with error -71 [ 1011.816987][ T113] usb 3-1: USB disconnect, device number 39 12:18:32 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000640)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe8f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x20}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0xfffffffffffffd58, &(0x7f0000005380)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x1b, {[@main=@item_4={0x3, 0x0, 0x0, "269b771b"}, @main=@item_012={0x2, 0x0, 0x0, "aa7a"}, @main=@item_4={0x3, 0x0, 0x0, "5db5646d"}, @global=@item_4={0x3, 0x1, 0x0, "88fbd3e0"}, @local=@item_4={0x3, 0x2, 0x0, "9d360e65"}, @main=@item_012={0x1, 0x0, 0x0, "a7"}, @main=@item_012={0x1, 0x0, 0xa, '~'}]}}, 0x0}, 0x0) 12:18:32 executing program 0: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x80045432, &(0x7f0000000040)) ioctl$TIOCNOTTY(r0, 0x5422) r1 = gettid() r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r2, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x39) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r2, 0x0, 0x0) 12:18:32 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0013ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:18:33 executing program 0: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x80045432, &(0x7f0000000040)) ioctl$TIOCNOTTY(r0, 0x5422) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(0x0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:18:33 executing program 0: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x80045432, &(0x7f0000000040)) ioctl$TIOCNOTTY(r0, 0x5422) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(0x0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:18:33 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000640)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe8f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x20}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0xfffffffffffffd58, &(0x7f0000005380)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x20, {[@main=@item_4={0x3, 0x0, 0x0, "269b771b"}, @global=@item_4={0x3, 0x1, 0x0, "bef90700"}, @main=@item_012={0x2, 0x0, 0x0, "aa7a"}, @main=@item_4={0x3, 0x0, 0x0, "5db5646d"}, @global=@item_4={0x3, 0x1, 0x0, "88fbd3e0"}, @local=@item_4={0x3, 0x2, 0x0, "9d360e65"}, @main=@item_012={0x1, 0x0, 0x0, "a7"}, @main=@item_012={0x1, 0x0, 0x0, '~'}]}}, 0x0}, 0x0) 12:18:33 executing program 4: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@private0={0xfc, 0x0, [], 0x1}, 0x6b}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:18:33 executing program 5: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x80045432, &(0x7f0000000040)) ioctl$TIOCNOTTY(r0, 0x5422) r1 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) dup(r3) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x39) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r2, 0x0, 0x0) 12:18:33 executing program 0: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x80045432, &(0x7f0000000040)) ioctl$TIOCNOTTY(r0, 0x5422) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(0x0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:18:33 executing program 5: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x80045432, &(0x7f0000000040)) ioctl$TIOCNOTTY(r0, 0x5422) r1 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) dup(r3) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x39) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r2, 0x0, 0x0) 12:18:33 executing program 4: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@private0={0xfc, 0x0, [], 0x1}, 0x6b}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:18:33 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac001fffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1012.532643][T11066] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 1012.772608][T11066] usb 3-1: Using ep0 maxpacket: 16 [ 1012.892665][T11066] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1012.903564][T11066] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1012.913306][T11066] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1012.926109][T11066] usb 3-1: New USB device found, idVendor=0e8f, idProduct=0003, bcdDevice= 0.00 [ 1012.935161][T11066] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1012.943714][T11066] usb 3-1: config 0 descriptor?? [ 1013.292612][T11066] usbhid 3-1:0.0: can't add hid device: -71 [ 1013.298567][T11066] usbhid: probe of 3-1:0.0 failed with error -71 [ 1013.306544][T11066] usb 3-1: USB disconnect, device number 40 [ 1013.762530][T11066] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 1014.002470][T11066] usb 3-1: Using ep0 maxpacket: 16 [ 1014.122614][T11066] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1014.133535][T11066] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1014.143890][T11066] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1014.157090][T11066] usb 3-1: New USB device found, idVendor=0e8f, idProduct=0003, bcdDevice= 0.00 [ 1014.166558][T11066] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1014.175524][T11066] usb 3-1: config 0 descriptor?? [ 1014.912421][T11066] usbhid 3-1:0.0: can't add hid device: -71 [ 1014.918404][T11066] usbhid: probe of 3-1:0.0 failed with error -71 [ 1014.926439][T11066] usb 3-1: USB disconnect, device number 41 12:18:36 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000640)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe8f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x20}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0xfffffffffffffd58, &(0x7f0000005380)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x1b, {[@global=@item_4={0x3, 0x1, 0x0, "bef90700"}, @main=@item_012={0x2, 0x0, 0x0, "aa7a"}, @main=@item_4={0x3, 0x0, 0x0, "5db5646d"}, @global=@item_4={0x3, 0x1, 0x0, "88fbd3e0"}, @local=@item_4={0x3, 0x2, 0x0, "9d360e65"}, @main=@item_012={0x1, 0x0, 0x0, "a7"}, @main=@item_012={0x1, 0x0, 0xa, '~'}]}}, 0x0}, 0x0) 12:18:36 executing program 4: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@private0={0xfc, 0x0, [], 0x1}, 0x6b}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:18:36 executing program 5: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x80045432, &(0x7f0000000040)) ioctl$TIOCNOTTY(r0, 0x5422) r1 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) dup(r3) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x39) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r2, 0x0, 0x0) 12:18:36 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0020ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:18:36 executing program 5: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x80045432, &(0x7f0000000040)) ioctl$TIOCNOTTY(r0, 0x5422) r1 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) dup(r3) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x39) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r2, 0x0, 0x0) 12:18:36 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000640)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe8f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x20}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0xfffffffffffffd58, &(0x7f0000005380)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x20, {[@main=@item_4={0x3, 0x0, 0x0, "269b771b"}, @global=@item_4={0x3, 0x1, 0x0, "bef90700"}, @main=@item_012={0x2, 0x0, 0x0, "aa7a"}, @main=@item_4={0x3, 0x0, 0x0, "5db5646d"}, @global=@item_4={0x3, 0x1, 0x0, "88fbd3e0"}, @local=@item_4={0x3, 0x2, 0x0, "9d360e65"}, @main=@item_012={0x1, 0x0, 0x0, "a7"}, @main=@item_012={0x1, 0x0, 0x0, '~'}]}}, 0x0}, 0x0) 12:18:36 executing program 0: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x80045432, &(0x7f0000000040)) r1 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r2, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x39) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r2, 0x0, 0x0) 12:18:36 executing program 5: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x80045432, &(0x7f0000000040)) ioctl$TIOCNOTTY(r0, 0x5422) r1 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) dup(r3) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x39) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r2, 0x0, 0x0) 12:18:36 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0022ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:18:36 executing program 5: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x80045432, &(0x7f0000000040)) ioctl$TIOCNOTTY(r0, 0x5422) r1 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) dup(r3) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x39) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r2, 0x0, 0x0) 12:18:36 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0024ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1015.642286][ T113] usb 3-1: new high-speed USB device number 42 using dummy_hcd 12:18:36 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0025ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1015.882272][ T113] usb 3-1: Using ep0 maxpacket: 16 [ 1016.032319][ T113] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1016.043295][ T113] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1016.053288][ T113] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1016.066181][ T113] usb 3-1: New USB device found, idVendor=0e8f, idProduct=0003, bcdDevice= 0.00 [ 1016.075260][ T113] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1016.086357][ T113] usb 3-1: config 0 descriptor?? [ 1016.422257][ T113] usbhid 3-1:0.0: can't add hid device: -71 [ 1016.428208][ T113] usbhid: probe of 3-1:0.0 failed with error -71 [ 1016.435711][ T113] usb 3-1: USB disconnect, device number 42 [ 1016.892171][ T113] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 1017.132118][ T113] usb 3-1: Using ep0 maxpacket: 16 [ 1017.252174][ T113] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1017.263121][ T113] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1017.273070][ T113] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1017.285921][ T113] usb 3-1: New USB device found, idVendor=0e8f, idProduct=0003, bcdDevice= 0.00 [ 1017.294985][ T113] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1017.303643][ T113] usb 3-1: config 0 descriptor?? [ 1018.042071][ T113] usbhid 3-1:0.0: can't add hid device: -71 [ 1018.048016][ T113] usbhid: probe of 3-1:0.0 failed with error -71 [ 1018.056214][ T113] usb 3-1: USB disconnect, device number 43 12:18:39 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000640)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe8f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x20}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0xfffffffffffffd58, &(0x7f0000005380)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x1b, {[@global=@item_4={0x3, 0x1, 0x0, "bef90700"}, @main=@item_012={0x2, 0x0, 0x0, "aa7a"}, @main=@item_4={0x3, 0x0, 0x0, "5db5646d"}, @global=@item_4={0x3, 0x1, 0x0, "88fbd3e0"}, @local=@item_4={0x3, 0x2, 0x0, "9d360e65"}, @main=@item_012={0x1, 0x0, 0x0, "a7"}, @main=@item_012={0x1, 0x0, 0xa, '~'}]}}, 0x0}, 0x0) 12:18:39 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45acb926ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:18:39 executing program 4: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@private0={0xfc, 0x0, [], 0x1}, 0x6b}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:18:39 executing program 1: syz_usb_connect(0x0, 0x58, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000036ee3808d30b55056a690000000109024600010000100009040000150e01000008240302"], 0x0) 12:18:39 executing program 4: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@private0={0xfc, 0x0, [], 0x1}, 0x6b}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:18:39 executing program 4: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@private0={0xfc, 0x0, [], 0x1}, 0x6b}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:18:39 executing program 0: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:18:39 executing program 0: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:18:39 executing program 5: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x80045432, &(0x7f0000000040)) ioctl$TIOCNOTTY(r0, 0x5422) r1 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) dup(r3) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r2, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x39) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r2, 0x0, 0x0) 12:18:39 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac003fffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1018.761962][ T113] usb 3-1: new high-speed USB device number 44 using dummy_hcd 12:18:39 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0040ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1019.001921][ T113] usb 3-1: Using ep0 maxpacket: 16 12:18:39 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0048ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1019.122045][ T113] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1019.136643][ T113] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1019.149952][ T113] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1019.163225][ T113] usb 3-1: New USB device found, idVendor=0e8f, idProduct=0003, bcdDevice= 0.00 [ 1019.172640][ T113] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1019.181244][ T113] usb 3-1: config 0 descriptor?? [ 1019.531915][ T113] usbhid 3-1:0.0: can't add hid device: -71 [ 1019.537947][ T113] usbhid: probe of 3-1:0.0 failed with error -71 [ 1019.545551][ T113] usb 3-1: USB disconnect, device number 44 [ 1020.021800][ T113] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 1020.261770][ T113] usb 3-1: Using ep0 maxpacket: 16 [ 1020.391818][ T113] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1020.402752][ T113] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1020.412728][ T113] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1020.425740][ T113] usb 3-1: New USB device found, idVendor=0e8f, idProduct=0003, bcdDevice= 0.00 [ 1020.434816][ T113] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1020.444749][ T113] usb 3-1: config 0 descriptor?? [ 1021.181745][ T113] usbhid 3-1:0.0: can't add hid device: -71 [ 1021.187835][ T113] usbhid: probe of 3-1:0.0 failed with error -71 [ 1021.195989][ T113] usb 3-1: USB disconnect, device number 45 12:18:42 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000640)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe8f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x20}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0xfffffffffffffd58, &(0x7f0000005380)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x1b, {[@global=@item_4={0x3, 0x1, 0x0, "bef90700"}, @main=@item_012={0x2, 0x0, 0x0, "aa7a"}, @main=@item_4={0x3, 0x0, 0x0, "5db5646d"}, @global=@item_4={0x3, 0x1, 0x0, "88fbd3e0"}, @local=@item_4={0x3, 0x2, 0x0, "9d360e65"}, @main=@item_012={0x1, 0x0, 0x0, "a7"}, @main=@item_012={0x1, 0x0, 0xa, '~'}]}}, 0x0}, 0x0) 12:18:42 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac004cffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:18:42 executing program 1: syz_usb_connect(0x0, 0x58, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000036ee3808d30b55056a690000000109024600010000100009040000150e01000008240302"], 0x0) 12:18:42 executing program 4: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@private0={0xfc, 0x0, [], 0x1}, 0x6b}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:18:42 executing program 4: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@private0={0xfc, 0x0, [], 0x1}, 0x6b}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:18:42 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0060ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:18:42 executing program 0: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:18:42 executing program 5: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x80045432, &(0x7f0000000040)) ioctl$TIOCNOTTY(r0, 0x5422) r1 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) dup(r3) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r2, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x39) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r2, 0x0, 0x0) 12:18:42 executing program 0: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:18:42 executing program 5: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x80045432, &(0x7f0000000040)) ioctl$TIOCNOTTY(r0, 0x5422) r1 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) dup(r3) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r2, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x39) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r2, 0x0, 0x0) 12:18:42 executing program 5: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x80045432, &(0x7f0000000040)) ioctl$TIOCNOTTY(r0, 0x5422) r1 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socket$packet(0x11, 0x2, 0x300) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r2, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x39) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r2, 0x0, 0x0) 12:18:42 executing program 0: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 1021.911608][T11066] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 1022.151580][T11066] usb 3-1: Using ep0 maxpacket: 16 [ 1022.271688][T11066] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1022.282651][T11066] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1022.293069][T11066] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1022.306481][T11066] usb 3-1: New USB device found, idVendor=0e8f, idProduct=0003, bcdDevice= 0.00 [ 1022.315892][T11066] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1022.324812][T11066] usb 3-1: config 0 descriptor?? [ 1022.661576][T11066] usbhid 3-1:0.0: can't add hid device: -71 [ 1022.667569][T11066] usbhid: probe of 3-1:0.0 failed with error -71 [ 1022.675740][T11066] usb 3-1: USB disconnect, device number 46 [ 1023.131450][T11066] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 1023.371452][T11066] usb 3-1: Using ep0 maxpacket: 16 [ 1023.491501][T11066] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1023.502484][T11066] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1023.513016][T11066] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1023.526331][T11066] usb 3-1: New USB device found, idVendor=0e8f, idProduct=0003, bcdDevice= 0.00 [ 1023.535732][T11066] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1023.545353][T11066] usb 3-1: config 0 descriptor?? [ 1024.271361][T11066] usbhid 3-1:0.0: can't add hid device: -71 [ 1024.277460][T11066] usbhid: probe of 3-1:0.0 failed with error -71 [ 1024.285534][T11066] usb 3-1: USB disconnect, device number 47 12:18:45 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0068ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:18:45 executing program 1: syz_usb_connect(0x0, 0x58, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000036ee3808d30b55056a690000000109024600010000100009040000150e01000008240302"], 0x0) 12:18:45 executing program 4: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@private0={0xfc, 0x0, [], 0x1}, 0x6b}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:18:45 executing program 2: syz_usb_connect(0x0, 0x62, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005b843320cd18fecae3990102030109025000010000000009040000000e0100000a24"], 0x0) 12:18:45 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac006cffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:18:45 executing program 5: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x80045432, &(0x7f0000000040)) ioctl$TIOCNOTTY(r0, 0x5422) r1 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r2, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x39) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r2, 0x0, 0x0) 12:18:45 executing program 0: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 1025.001254][ T113] usb 3-1: new high-speed USB device number 48 using dummy_hcd 12:18:45 executing program 5: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x80045432, &(0x7f0000000040)) ioctl$TIOCNOTTY(r0, 0x5422) r1 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r2, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x39) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r2, 0x0, 0x0) 12:18:45 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0074ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1025.251268][ T113] usb 3-1: Using ep0 maxpacket: 32 12:18:46 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac007affffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:18:46 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0480ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1025.371320][ T113] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1025.462305][T18853] loop3: p1 p2 p3 p4 [ 1025.466476][T18853] loop3: p1 start 10 is beyond EOD, truncated [ 1025.472808][T18853] loop3: p2 start 25 is beyond EOD, truncated [ 1025.478932][T18853] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1025.485960][T18853] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1025.551281][ T113] usb 3-1: New USB device found, idVendor=18cd, idProduct=cafe, bcdDevice=99.e3 [ 1025.560359][ T113] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1025.568417][ T113] usb 3-1: Product: syz [ 1025.572672][ T113] usb 3-1: Manufacturer: syz [ 1025.572766][T18853] loop3: p1 p2 p3 p4 [ 1025.577283][ T113] usb 3-1: SerialNumber: syz [ 1025.582591][T18853] loop3: p1 start 10 is beyond EOD, truncated [ 1025.589583][ T113] usb 3-1: config 0 descriptor?? 12:18:46 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0090ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1025.596107][T18853] loop3: p2 start 25 is beyond EOD, truncated [ 1025.603446][T18853] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1025.610189][T18853] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1025.651702][ T113] uvcvideo: Found UVC 0.00 device syz (18cd:cafe) [ 1025.658218][ T113] uvcvideo: No valid video chain found. 12:18:46 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac26b9ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1025.857160][T11066] usb 3-1: USB disconnect, device number 48 12:18:48 executing program 1: syz_read_part_table(0x0, 0x7ec0, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:18:48 executing program 4: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@private0={0xfc, 0x0, [], 0x1}, 0x6b}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:18:48 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac04f5ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:18:48 executing program 2: syz_read_part_table(0x0, 0x7ec2, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:18:48 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0fffffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1027.881292][T18871] loop2: p1 p3 p4 [ 1027.885110][T18871] loop2: p1 size 11290111 extends beyond EOD, truncated [ 1027.893321][T18871] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 1027.928543][T18873] loop1: p1 p3 p4 [ 1027.934175][T18873] loop1: p1 size 11290111 extends beyond EOD, truncated [ 1027.943690][T18873] loop1: p4 size 3657465856 extends beyond EOD, truncated 12:18:48 executing program 0: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:18:48 executing program 5: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x80045432, &(0x7f0000000040)) ioctl$TIOCNOTTY(r0, 0x5422) r1 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r2, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x39) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r2, 0x0, 0x0) 12:18:48 executing program 1: syz_read_part_table(0x0, 0x7ec0, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:18:48 executing program 2: syz_read_part_table(0x0, 0x7ec2, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:18:48 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0002ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:18:48 executing program 0: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:18:48 executing program 5: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x80045432, &(0x7f0000000040)) ioctl$TIOCNOTTY(r0, 0x5422) r1 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r2, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x39) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r2, 0x0, 0x0) 12:18:49 executing program 5: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x80045432, &(0x7f0000000040)) ioctl$TIOCNOTTY(r0, 0x5422) r1 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r2, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x39) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r2, 0x0, 0x0) [ 1028.534018][T18895] loop2: p1 p3 p4 [ 1028.539468][T18895] loop2: p1 size 11290111 extends beyond EOD, truncated [ 1028.547890][T18895] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 1028.625408][T18894] loop1: p1 p3 p4 [ 1028.629313][T18894] loop1: p1 size 11290111 extends beyond EOD, truncated [ 1028.637340][T18894] loop1: p4 size 3657465856 extends beyond EOD, truncated 12:18:51 executing program 4: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f", 0x1}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@private0={0xfc, 0x0, [], 0x1}, 0x6b}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:18:51 executing program 5: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x80045432, &(0x7f0000000040)) ioctl$TIOCNOTTY(r0, 0x5422) r1 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x39) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, 0x0, 0x0, 0x0) 12:18:51 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0003ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:18:51 executing program 2: syz_read_part_table(0x0, 0x7ec2, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:18:51 executing program 1: syz_read_part_table(0x0, 0x7ec0, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:18:51 executing program 5: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x80045432, &(0x7f0000000040)) ioctl$TIOCNOTTY(r0, 0x5422) r1 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x39) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, 0x0, 0x0, 0x0) 12:18:51 executing program 5: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x80045432, &(0x7f0000000040)) ioctl$TIOCNOTTY(r0, 0x5422) r1 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x39) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, 0x0, 0x0, 0x0) 12:18:51 executing program 5: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x80045432, &(0x7f0000000040)) ioctl$TIOCNOTTY(r0, 0x5422) r1 = gettid() r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r2, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x39) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r2, 0x0, 0x0) 12:18:51 executing program 5: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x80045432, &(0x7f0000000040)) ioctl$TIOCNOTTY(r0, 0x5422) r1 = gettid() r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r2, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x39) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r2, 0x0, 0x0) [ 1030.911034][T18930] loop2: p1 p3 p4 [ 1030.915065][T18930] loop2: p1 size 11290111 extends beyond EOD, truncated [ 1030.923325][T18930] loop2: p4 size 3657465856 extends beyond EOD, truncated [ 1030.943834][T18924] loop1: p1 p3 p4 [ 1030.948022][T18924] loop1: p1 size 11290111 extends beyond EOD, truncated [ 1030.956168][T18924] loop1: p4 size 3657465856 extends beyond EOD, truncated 12:18:52 executing program 0: r0 = gettid() clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:18:52 executing program 5: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x80045432, &(0x7f0000000040)) ioctl$TIOCNOTTY(r0, 0x5422) r1 = gettid() r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r2, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x39) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r2, 0x0, 0x0) 12:18:52 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0004ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:18:54 executing program 1: syz_read_part_table(0x0, 0x0, 0x0) 12:18:54 executing program 2: syz_read_part_table(0x0, 0x0, 0x0) 12:18:54 executing program 4: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f", 0x1}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@private0={0xfc, 0x0, [], 0x1}, 0x6b}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:18:54 executing program 5: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x80045432, &(0x7f0000000040)) ioctl$TIOCNOTTY(r0, 0x5422) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(0x0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:18:54 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0005ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:18:54 executing program 0: r0 = gettid() clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:18:54 executing program 0: r0 = gettid() clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:18:54 executing program 2: syz_read_part_table(0x0, 0x0, 0x0) 12:18:54 executing program 1: syz_read_part_table(0x0, 0x0, 0x0) 12:18:54 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0006ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:18:54 executing program 0: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:18:54 executing program 2: syz_read_part_table(0x0, 0x0, 0x0) 12:18:54 executing program 0: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:18:55 executing program 1: syz_read_part_table(0x0, 0x0, 0x0) 12:18:57 executing program 5: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x80045432, &(0x7f0000000040)) ioctl$TIOCNOTTY(r0, 0x5422) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(0x0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:18:57 executing program 4: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f", 0x1}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@private0={0xfc, 0x0, [], 0x1}, 0x6b}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:18:57 executing program 0: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:18:57 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0007ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:18:57 executing program 2: syz_read_part_table(0x0, 0x0, &(0x7f0000000040)) 12:18:57 executing program 1: syz_read_part_table(0x0, 0x0, &(0x7f0000000040)) 12:18:57 executing program 0: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r2 = socket$packet(0x11, 0x0, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:18:57 executing program 1: syz_read_part_table(0x0, 0x0, &(0x7f0000000040)) 12:18:57 executing program 2: syz_read_part_table(0x0, 0x0, &(0x7f0000000040)) 12:18:57 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0008ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:18:57 executing program 1: syz_read_part_table(0x0, 0x0, &(0x7f0000000040)) 12:18:58 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{0x0, 0x0, 0x1c0}]) 12:19:00 executing program 2: syz_read_part_table(0x0, 0x0, &(0x7f0000000040)) 12:19:00 executing program 4: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:19:00 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0009ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:19:00 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{0x0, 0x0, 0x1c0}]) 12:19:00 executing program 5: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x80045432, &(0x7f0000000040)) ioctl$TIOCNOTTY(r0, 0x5422) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(0x0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:19:00 executing program 5: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x80045432, &(0x7f0000000040)) r1 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r2, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x39) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r2, 0x0, 0x0) 12:19:00 executing program 0: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r2 = socket$packet(0x11, 0x0, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:19:00 executing program 2: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{0x0, 0x0, 0x1c0}]) 12:19:00 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{0x0, 0x0, 0x1c0}]) 12:19:00 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac000affffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:19:00 executing program 2: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{0x0, 0x0, 0x1c0}]) 12:19:01 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac000bffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:19:01 executing program 2: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{0x0, 0x0, 0x1c0}]) 12:19:03 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080), 0x0, 0x1c0}]) 12:19:03 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac000cffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:19:03 executing program 4: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:19:03 executing program 2: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080), 0x0, 0x1c0}]) 12:19:03 executing program 5: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:19:03 executing program 0: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r2 = socket$packet(0x11, 0x0, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:19:03 executing program 4: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:19:03 executing program 5: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:19:03 executing program 2: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080), 0x0, 0x1c0}]) 12:19:03 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac000dffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:19:03 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080), 0x0, 0x1c0}]) 12:19:04 executing program 2: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080), 0x0, 0x1c0}]) 12:19:04 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080), 0x0, 0x1c0}]) 12:19:04 executing program 2: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e931190000000000000680ff", 0x20, 0x1c0}]) 12:19:04 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac000effffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:19:04 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e931190000000000000680ff", 0x20, 0x1c0}]) 12:19:04 executing program 2: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e931190000000000000680ff", 0x20, 0x1c0}]) 12:19:06 executing program 0: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socket$packet(0x11, 0x2, 0x300) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:19:06 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0010ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:19:06 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e931190000000000000680ff", 0x20, 0x1c0}]) 12:19:06 executing program 2: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e931190000000000000680ff", 0x20, 0x1c0}]) 12:19:06 executing program 4: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@private0, 0x6b}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:19:06 executing program 5: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:19:06 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e931190000000000000680ff", 0x20, 0x1c0}]) 12:19:06 executing program 2: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030", 0x30, 0x1c0}]) 12:19:07 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0011ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:19:07 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030", 0x30, 0x1c0}]) 12:19:07 executing program 2: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030", 0x30, 0x1c0}]) 12:19:07 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0012ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:19:09 executing program 0: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socket$packet(0x11, 0x2, 0x300) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:19:09 executing program 2: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030", 0x30, 0x1c0}]) 12:19:09 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030", 0x30, 0x1c0}]) 12:19:09 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0013ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:19:09 executing program 4: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@private0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:19:09 executing program 5: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:19:10 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030", 0x30, 0x1c0}]) 12:19:10 executing program 2: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff0000", 0x38, 0x1c0}]) 12:19:10 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0022ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:19:10 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff0000", 0x38, 0x1c0}]) 12:19:10 executing program 2: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff0000", 0x38, 0x1c0}]) 12:19:10 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0024ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:19:12 executing program 0: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socket$packet(0x11, 0x2, 0x300) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:19:12 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff0000", 0x38, 0x1c0}]) 12:19:12 executing program 2: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff0000", 0x38, 0x1c0}]) 12:19:12 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0025ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:19:12 executing program 4: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@private0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:19:12 executing program 5: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:19:12 executing program 4: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@private0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:19:13 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff0000", 0x38, 0x1c0}]) 12:19:13 executing program 2: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff000000000080", 0x3c, 0x1c0}]) 12:19:13 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0048ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:19:13 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff000000000080", 0x3c, 0x1c0}]) 12:19:13 executing program 2: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff000000000080", 0x3c, 0x1c0}]) 12:19:15 executing program 0: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:19:15 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff000000000080", 0x3c, 0x1c0}]) 12:19:15 executing program 2: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff000000000080", 0x3c, 0x1c0}]) 12:19:15 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac004cffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:19:15 executing program 5: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:19:16 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0060ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:19:16 executing program 4: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@private0, 0x6b}) ptrace$setopts(0xffffffffffffffff, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:19:16 executing program 2: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da", 0x3e, 0x1c0}]) 12:19:16 executing program 4: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@private0, 0x6b}) ptrace$setopts(0xffffffffffffffff, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:19:16 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff000000000080", 0x3c, 0x1c0}]) 12:19:16 executing program 4: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@private0, 0x6b}) ptrace$setopts(0xffffffffffffffff, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:19:16 executing program 4: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@private0, 0x6b}) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:19:19 executing program 0: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:19:19 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0068ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:19:19 executing program 4: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@private0, 0x6b}) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:19:19 executing program 2: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da", 0x3e, 0x1c0}]) 12:19:19 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da", 0x3e, 0x1c0}]) 12:19:19 executing program 5: r0 = gettid() clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:19:19 executing program 4: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@private0, 0x6b}) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:19:19 executing program 4: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@private0, 0x6b}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:19:19 executing program 5: r0 = gettid() clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:19:19 executing program 2: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da", 0x3e, 0x1c0}]) 12:19:19 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da", 0x3e, 0x1c0}]) 12:19:19 executing program 5: r0 = gettid() clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:19:22 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac006cffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:19:22 executing program 5: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:19:22 executing program 0: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:19:22 executing program 2: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55", 0x3f, 0x1c0}]) 12:19:22 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da", 0x3e, 0x1c0}]) 12:19:22 executing program 5: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:19:22 executing program 4: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@private0, 0x6b}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:19:22 executing program 0: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:19:22 executing program 5: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:19:22 executing program 4: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@private0, 0x6b}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:19:22 executing program 0: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:19:22 executing program 2: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55", 0x3f, 0x1c0}]) 12:19:22 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0074ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:19:22 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55", 0x3f, 0x1c0}]) 12:19:22 executing program 5: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:19:22 executing program 5: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:19:22 executing program 5: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:19:22 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55", 0x3f, 0x1c0}]) 12:19:22 executing program 5: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:19:22 executing program 2: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55", 0x3f, 0x1c0}]) 12:19:22 executing program 5: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:19:25 executing program 4: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@private0, 0x6b}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:19:25 executing program 0: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:19:25 executing program 5: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:19:25 executing program 2: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40}]) 12:19:25 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55", 0x3f, 0x1c0}]) 12:19:25 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac007affffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:19:25 executing program 2: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40}]) 12:19:25 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40}]) 12:19:25 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac00000000000500e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:19:26 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40}]) 12:19:26 executing program 2: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40}]) 12:19:26 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40}]) [ 1065.585322][T19482] loop3: p1 p2 < > p3 p4 [ 1065.590256][T19482] loop3: partition table partially beyond EOD, truncated [ 1065.598966][T19482] loop3: p1 start 10 is beyond EOD, truncated [ 1065.605354][T19482] loop3: p2 start 25 is beyond EOD, truncated [ 1065.612039][T19482] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1065.620377][T19482] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:19:28 executing program 2: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da", 0x3e, 0x1c0}]) 12:19:28 executing program 0: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:19:28 executing program 4: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@private0, 0x6b}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:19:28 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac00000000000f00e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:19:28 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff000000000080", 0x3c, 0x1c0}]) 12:19:28 executing program 5: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:19:28 executing program 2: syz_read_part_table(0x0, 0x7ebf, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:19:28 executing program 5: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 1067.907072][T19496] loop3: p1 p2 < > p3 p4 [ 1067.911429][T19496] loop3: partition table partially beyond EOD, truncated [ 1067.918763][T19496] loop3: p1 start 10 is beyond EOD, truncated [ 1067.924908][T19496] loop3: p2 start 25 is beyond EOD, truncated [ 1067.931103][T19496] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1067.937938][T19496] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1067.989954][T19510] loop2: p1 p3 p4 [ 1067.993866][T19510] loop2: p1 size 11290111 extends beyond EOD, truncated [ 1068.002060][T19510] loop2: p4 size 3657465856 extends beyond EOD, truncated 12:19:28 executing program 1: syz_read_part_table(0x0, 0x7ebe, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:19:28 executing program 2: syz_read_part_table(0x0, 0x7ebd, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1068.139319][T19496] loop3: p1 p2 < > p3 p4 [ 1068.143675][T19496] loop3: partition table partially beyond EOD, truncated [ 1068.157327][T19496] loop3: p1 start 10 is beyond EOD, truncated [ 1068.176687][T19496] loop3: p2 start 25 is beyond EOD, truncated [ 1068.182878][T19496] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1068.196666][T19496] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1068.204108][T19519] loop1: p1 p3 p4 [ 1068.208106][T19519] loop1: p1 size 11290111 extends beyond EOD, truncated [ 1068.216474][T19519] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 1068.225549][ T153] loop3: p1 p2 < > p3 p4 [ 1068.236666][ T153] loop3: partition table partially beyond EOD, truncated [ 1068.243779][ T153] loop3: p1 start 10 is beyond EOD, truncated [ 1068.251030][ T153] loop3: p2 start 25 is beyond EOD, truncated [ 1068.257613][ T153] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1068.264370][ T153] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:19:29 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac00000000005400e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:19:29 executing program 1: syz_read_part_table(0x0, 0x7eb5, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1068.297068][T19521] loop2: p1 p3 p4 [ 1068.306836][T19521] loop2: p1 size 11290111 extends beyond EOD, truncated [ 1068.316559][T19521] loop2: p4 size 3657465856 extends beyond EOD, truncated 12:19:29 executing program 2: syz_read_part_table(0x0, 0x7eb1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1068.526002][T19526] loop3: p1 p2[DM] p3 p4 [ 1068.530842][T19526] loop3: p1 start 10 is beyond EOD, truncated [ 1068.567456][T19526] loop3: p2 start 25 is beyond EOD, truncated [ 1068.574989][T19526] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1068.582912][T19526] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1068.638185][T19528] loop1: p1 p3 p4 [ 1068.642282][T19528] loop1: p1 size 11290111 extends beyond EOD, truncated [ 1068.652492][T19528] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 1068.680617][ T153] loop1: p1 p3 p4 [ 1068.684612][ T153] loop1: p1 size 11290111 extends beyond EOD, truncated [ 1068.693042][ T153] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 1068.707044][T19532] loop2: p1 p3 p4 [ 1068.710895][T19532] loop2: p1 size 11290111 extends beyond EOD, truncated [ 1068.719362][T19532] loop2: p4 size 3657465856 extends beyond EOD, truncated 12:19:31 executing program 0: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:19:31 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac00000000005500e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:19:31 executing program 1: syz_read_part_table(0x0, 0xa, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:19:31 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000040)) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_matches\x00') r2 = syz_open_dev$mouse(&(0x7f0000000180)='/dev/input/mouse#\x00', 0x101, 0x400000) ioctl$PPPIOCDISCONN(r2, 0x7439) readv(r1, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) readv(r1, &(0x7f0000000580), 0x3c1) r3 = openat(r1, &(0x7f0000000040)='./file0\x00', 0x10100, 0x40) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getsockname$packet(r6, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @empty}]}]}]}, 0x3c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000080)={'wg0\x00', r7}) 12:19:31 executing program 4: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@private0, 0x6b}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:19:31 executing program 5: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:19:31 executing program 2: syz_read_part_table(0xffff0f0000000000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1071.027202][T19545] loop3: p1 p2[EZD] p3 p4 [ 1071.029430][T19549] loop1: p1 p3 p4 [ 1071.032163][T19545] loop3: p1 start 10 is beyond EOD, truncated [ 1071.035534][T19549] loop1: p1 size 11290111 extends beyond EOD, truncated [ 1071.042759][T19545] loop3: p2 start 25 is beyond EOD, truncated [ 1071.050355][T19549] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 1071.055408][T19545] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1071.068580][T19545] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1071.099340][T19558] loop2: p1 p2 p3 p4 [ 1071.103608][T19558] loop2: p1 size 11290111 extends beyond EOD, truncated [ 1071.111152][T19558] loop2: p2 size 100663296 extends beyond EOD, truncated [ 1071.118738][T19558] loop2: p3 start 4293001441 is beyond EOD, truncated [ 1071.125491][T19558] loop2: p4 size 3657465856 extends beyond EOD, truncated 12:19:31 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000040)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(r1, 0x80045432, &(0x7f0000000040)) r2 = dup3(r0, r1, 0x80000) ioctl$EVIOCSABS20(r2, 0x401845e0, &(0x7f0000000040)={0x4d6934f2, 0x9db4, 0x4, 0x101, 0x8000, 0x6}) 12:19:31 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087703, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x402200, 0x0) r2 = dup2(0xffffffffffffffff, r0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000100)='fou\x00') sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000740)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000610}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x30, r5, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x4084) sendmsg$FOU_CMD_GET(r2, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r5, 0x706, 0x70bd2d, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @empty}]}, 0x28}, 0x1, 0x0, 0x0, 0xc000}, 0x4) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000080)=@req={0x3, 0x3, 0x5}, 0x10) 12:19:31 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_matches\x00') readv(r1, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) readv(r1, &(0x7f0000000580), 0x3c1) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)={&(0x7f0000000080)='./file0\x00', r1}, 0x10) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000040)) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_matches\x00') readv(r2, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) readv(r2, &(0x7f0000000580), 0x3c1) ioctl$sock_SIOCGSKNS(r2, 0x894c, &(0x7f0000000040)=0x7) 12:19:31 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac00000000006300e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:19:32 executing program 2: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = gettid() readv(0xffffffffffffffff, &(0x7f0000000580), 0x3c1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="93b20000000000000000010000000000000001410000001c001700020000000000006574683a73797a6b616c6c657231"], 0x38}}, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, r2, 0x20, 0x70bd2a, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x5156975f9c69b8f7}, 0x40084) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x135}) ptrace$setopts(0x4206, r3, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r3, 0x0, 0x0) [ 1071.361724][T19568] loop3: p1 p2 p3 p4 [ 1071.362697][T19574] tipc: Enabling of bearer rejected, failed to enable media [ 1071.369439][T19568] loop3: p1 start 10 is beyond EOD, truncated [ 1071.382826][T19568] loop3: p2 start 25 is beyond EOD, truncated [ 1071.392114][T19568] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1071.399133][T19568] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:19:34 executing program 0: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:19:34 executing program 1: add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_matches\x00') readv(r1, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) readv(r1, &(0x7f0000000580), 0x3c1) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_matches\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) readv(r2, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) readv(r2, &(0x7f0000000580), 0x3c1) ioctl$ASHMEM_SET_NAME(r2, 0x40087707, &(0x7f00000011c0)='\x9eC`\xe3\xf0\xc0\xce\x1d&b\xe1\x8a\xf7U\xe38\xa7\xd7v2\x00n>\xd6\x06\x7f7\x97\xc46\x994\xb0Bt\xe0\xcf\xaf\xaa\x01\x1e\x05\x1f\xda\x17\x8c\xf61\n\abJ\xf4\x8eY\xdd.$G\xe2k\xb29k\xfb\xc4\xb4\x95\xb3\xa6BP\xbca\xacz=\xe3\xb3\xd8S\xfe\x87\xf2O.7)\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8b\xf3\x92\x985\xe2\x15H\xf3j9\xc0\x82\xdaq\x01\xa9\xcf\x80\xf6J\x1e\xd8\xb6\x16\x03\xe0~\xce\xe6\xa5\xb6\x9a p3 p4 [ 1074.154512][T19606] loop3: partition table partially beyond EOD, truncated [ 1074.161956][T19606] loop3: p1 start 10 is beyond EOD, truncated [ 1074.168216][T19606] loop3: p2 start 25 is beyond EOD, truncated [ 1074.174382][T19606] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1074.181215][T19606] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:19:35 executing program 2: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = gettid() readv(0xffffffffffffffff, &(0x7f0000000580), 0x3c1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="93b20000000000000000010000000000000001410000001c001700020000000000006574683a73797a6b616c6c657231"], 0x38}}, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, r2, 0x20, 0x70bd2a, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x5156975f9c69b8f7}, 0x40084) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x135}) ptrace$setopts(0x4206, r3, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r3, 0x0, 0x0) [ 1074.423278][T19610] tipc: Enabling of bearer rejected, failed to enable media 12:19:37 executing program 0: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:19:37 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(r1, 0x80045432, &(0x7f0000000040)) fchmod(r1, 0x0) 12:19:37 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffffa500e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:19:37 executing program 2: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = gettid() readv(0xffffffffffffffff, &(0x7f0000000580), 0x3c1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="93b20000000000000000010000000000000001410000001c001700020000000000006574683a73797a6b616c6c657231"], 0x38}}, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, r2, 0x20, 0x70bd2a, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x5156975f9c69b8f7}, 0x40084) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x135}) ptrace$setopts(0x4206, r3, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r3, 0x0, 0x0) 12:19:37 executing program 5: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:19:37 executing program 4: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@private0, 0x6b}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:19:37 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) fchmod(r1, 0x0) [ 1077.030630][T19623] tipc: Enabling of bearer rejected, failed to enable media [ 1077.066175][T19621] loop3: p1 p2 p3 p4 [ 1077.073416][T19621] loop3: p1 start 10 is beyond EOD, truncated 12:19:37 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) fchmod(0xffffffffffffffff, 0x0) 12:19:37 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) fchmod(0xffffffffffffffff, 0x0) [ 1077.082938][T19621] loop3: p2 start 25 is beyond EOD, truncated [ 1077.090727][T19621] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1077.098471][T19621] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:19:37 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffffa600e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:19:37 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) fchmod(0xffffffffffffffff, 0x0) 12:19:37 executing program 1: openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) fchmod(r0, 0x0) [ 1077.259058][T19643] loop3: p1 p2 p3 p4 [ 1077.263336][T19643] loop3: p1 start 10 is beyond EOD, truncated [ 1077.270419][T19643] loop3: p2 start 25 is beyond EOD, truncated [ 1077.276963][T19643] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1077.283874][T19643] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1077.292747][ T153] loop3: p1 p2 p3 p4 [ 1077.296865][ T153] loop3: p1 start 10 is beyond EOD, truncated [ 1077.302910][ T153] loop3: p2 start 25 is beyond EOD, truncated [ 1077.309468][ T153] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1077.316369][ T153] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1077.408536][T19643] loop3: p1 p2 p3 p4 [ 1077.412706][T19643] loop3: p1 start 10 is beyond EOD, truncated [ 1077.419222][T19643] loop3: p2 start 25 is beyond EOD, truncated [ 1077.425299][T19643] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1077.432453][T19643] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:19:40 executing program 0: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:19:40 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) fchmod(r0, 0x0) 12:19:40 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffffa900e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:19:40 executing program 2: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = gettid() readv(0xffffffffffffffff, &(0x7f0000000580), 0x3c1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="93b20000000000000000010000000000000001410000001c001700020000000000006574683a73797a6b616c6c657231"], 0x38}}, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, r2, 0x20, 0x70bd2a, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x5156975f9c69b8f7}, 0x40084) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x135}) ptrace$setopts(0x4206, r3, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$cont(0x9, r3, 0x0, 0x0) 12:19:40 executing program 5: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:19:40 executing program 4: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@private0, 0x6b}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:19:40 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchmod(r0, 0x0) 12:19:40 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchmod(r0, 0x0) [ 1080.083791][T19654] loop3: p1 p2 p3 p4 [ 1080.092205][T19654] loop3: p1 start 10 is beyond EOD, truncated [ 1080.104723][T19654] loop3: p2 start 25 is beyond EOD, truncated [ 1080.105524][T19672] tipc: Enabling of bearer rejected, failed to enable media [ 1080.117150][T19654] loop3: p3 start 4293001441 is beyond EOD, truncated 12:19:40 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchmod(r0, 0x0) 12:19:40 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) fchmod(0xffffffffffffffff, 0x0) [ 1080.130359][T19654] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:19:40 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) fchmod(0xffffffffffffffff, 0x0) 12:19:40 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) fchmod(0xffffffffffffffff, 0x0) [ 1080.215912][T19654] loop3: p1 p2 p3 p4 [ 1080.220110][T19654] loop3: p1 start 10 is beyond EOD, truncated [ 1080.228857][T19654] loop3: p2 start 25 is beyond EOD, truncated [ 1080.235040][T19654] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1080.242104][T19654] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:19:43 executing program 0: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:19:43 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffffa500e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:19:43 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffffbf00e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:19:43 executing program 2: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = gettid() readv(0xffffffffffffffff, &(0x7f0000000580), 0x3c1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="93b20000000000000000010000000000000001410000001c001700020000000000006574683a73797a6b616c6c657231"], 0x38}}, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, r2, 0x20, 0x70bd2a, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x5156975f9c69b8f7}, 0x40084) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x135}) ptrace$setopts(0x4206, r3, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$cont(0x9, r3, 0x0, 0x0) 12:19:43 executing program 5: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f", 0x1}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:19:43 executing program 4: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@private0, 0x6b}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x2, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 1083.180316][T19692] loop1: p1 p2 p3 p4 [ 1083.185405][T19692] loop1: p1 start 10 is beyond EOD, truncated [ 1083.193908][T19692] loop1: p2 start 25 is beyond EOD, truncated [ 1083.200720][T19692] loop1: p3 start 4293001441 is beyond EOD, truncated [ 1083.207888][T19692] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 1083.213583][T19707] tipc: Enabling of bearer rejected, failed to enable media 12:19:43 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffffa500e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1083.260226][T19691] loop3: p1 p2 p3 p4 [ 1083.264717][T19691] loop3: p1 start 10 is beyond EOD, truncated [ 1083.282085][T19691] loop3: p2 start 25 is beyond EOD, truncated [ 1083.288691][T19691] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1083.295845][T19691] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1083.316448][T19711] loop1: p1 p2 p3 p4 [ 1083.321050][T19711] loop1: p1 start 10 is beyond EOD, truncated [ 1083.327657][T19711] loop1: p2 start 25 is beyond EOD, truncated [ 1083.333958][T19711] loop1: p3 start 4293001441 is beyond EOD, truncated [ 1083.341145][T19711] loop1: p4 size 3657465856 extends beyond EOD, truncated 12:19:44 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffffa500e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:19:44 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffffee00e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:19:44 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000fffffffd00e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1083.505645][T19717] loop1: p1 p2 p3 p4 [ 1083.510743][T19717] loop1: p1 start 10 is beyond EOD, truncated [ 1083.516850][T19717] loop1: p2 start 25 is beyond EOD, truncated [ 1083.522905][T19717] loop1: p3 start 4293001441 is beyond EOD, truncated [ 1083.529807][T19717] loop1: p4 size 3657465856 extends beyond EOD, truncated 12:19:44 executing program 1: syz_read_part_table(0x0, 0x0, 0x0) [ 1083.686223][T19720] loop3: p1 p2 p3 p4 [ 1083.690596][T19720] loop3: p1 start 10 is beyond EOD, truncated [ 1083.696829][T19720] loop3: p2 start 25 is beyond EOD, truncated [ 1083.702952][T19720] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1083.709762][T19720] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:19:44 executing program 1: syz_read_part_table(0x0, 0x0, 0x0) [ 1083.907852][T19720] loop3: p1 p2 p3 p4 [ 1083.911962][T19720] loop3: p1 start 10 is beyond EOD, truncated [ 1083.918083][T19720] loop3: p2 start 25 is beyond EOD, truncated [ 1083.924146][T19720] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1083.931052][T19720] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1084.065728][ T153] loop3: p1 p2 p3 p4 [ 1084.069840][ T153] loop3: p1 start 10 is beyond EOD, truncated [ 1084.076094][ T153] loop3: p2 start 25 is beyond EOD, truncated [ 1084.082190][ T153] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1084.088974][ T153] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:19:46 executing program 0: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:19:46 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8202e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:19:46 executing program 1: syz_read_part_table(0x0, 0x0, 0x0) 12:19:46 executing program 2: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = gettid() readv(0xffffffffffffffff, &(0x7f0000000580), 0x3c1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="93b20000000000000000010000000000000001410000001c001700020000000000006574683a73797a6b616c6c657231"], 0x38}}, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, r2, 0x20, 0x70bd2a, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x5156975f9c69b8f7}, 0x40084) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x135}) ptrace$setopts(0x4206, r3, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$cont(0x9, r3, 0x0, 0x0) 12:19:46 executing program 5: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f", 0x1}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:19:46 executing program 4: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@private0, 0x6b}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x2, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:19:46 executing program 4: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@private0, 0x6b}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x2, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 1086.208019][T19732] loop3: p1 p2 p3 p4 [ 1086.212169][T19732] loop3: p1 start 10 is beyond EOD, truncated [ 1086.218866][T19732] loop3: p2 start 25 is beyond EOD, truncated [ 1086.225243][T19732] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1086.231990][T19732] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:19:47 executing program 2: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) gettid() readv(0xffffffffffffffff, &(0x7f0000000580), 0x3c1) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="93b20000000000000000010000000000000001410000001c001700020000000000006574683a73797a6b616c6c657231"], 0x38}}, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, r1, 0x20, 0x70bd2a, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x5156975f9c69b8f7}, 0x40084) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x135}) ptrace$setopts(0x4206, r2, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r2, 0x0, 0x0) [ 1086.256437][T19747] tipc: Enabling of bearer rejected, failed to enable media 12:19:47 executing program 1: syz_read_part_table(0x0, 0x0, &(0x7f0000000040)) [ 1086.335281][T19732] loop3: p1 p2 p3 p4 [ 1086.339408][T19732] loop3: p1 start 10 is beyond EOD, truncated [ 1086.345722][T19732] loop3: p2 start 25 is beyond EOD, truncated [ 1086.351781][T19732] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1086.367852][T19732] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1086.374354][T19754] tipc: Enabling of bearer rejected, failed to enable media 12:19:47 executing program 2: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) gettid() readv(0xffffffffffffffff, &(0x7f0000000580), 0x3c1) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="93b20000000000000000010000000000000001410000001c001700020000000000006574683a73797a6b616c6c657231"], 0x38}}, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, r1, 0x20, 0x70bd2a, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x5156975f9c69b8f7}, 0x40084) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x135}) ptrace$setopts(0x4206, r2, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r2, 0x0, 0x0) 12:19:47 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8203e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:19:47 executing program 2: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) gettid() readv(0xffffffffffffffff, &(0x7f0000000580), 0x3c1) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="93b20000000000000000010000000000000001410000001c001700020000000000006574683a73797a6b616c6c657231"], 0x38}}, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, r1, 0x20, 0x70bd2a, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x5156975f9c69b8f7}, 0x40084) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x135}) ptrace$setopts(0x4206, r2, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r2, 0x0, 0x0) [ 1086.520373][T19761] tipc: Enabling of bearer rejected, failed to enable media [ 1086.575625][ T153] loop3: p1 p2 p3 p4 [ 1086.582668][ T153] loop3: p1 start 10 is beyond EOD, truncated [ 1086.588991][ T153] loop3: p2 start 25 is beyond EOD, truncated [ 1086.595408][ T153] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1086.598051][T19764] tipc: Enabling of bearer rejected, failed to enable media [ 1086.602162][ T153] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1086.695222][T19766] loop3: p1 p2 p3 p4 [ 1086.699410][T19766] loop3: p1 start 10 is beyond EOD, truncated [ 1086.706055][T19766] loop3: p2 start 25 is beyond EOD, truncated [ 1086.712214][T19766] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1086.721298][T19766] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:19:49 executing program 0: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:19:49 executing program 1: syz_read_part_table(0x0, 0x0, &(0x7f0000000040)) 12:19:49 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8204e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:19:49 executing program 5: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f", 0x1}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:19:50 executing program 0: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:19:50 executing program 4: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@private0, 0x6b}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x2, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:19:50 executing program 1: syz_read_part_table(0x0, 0x0, &(0x7f0000000040)) 12:19:50 executing program 0: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 1089.308238][T19772] loop3: p1 p2 p3 p4 [ 1089.312395][T19772] loop3: p1 start 10 is beyond EOD, truncated [ 1089.321184][T19772] loop3: p2 start 25 is beyond EOD, truncated [ 1089.327385][T19772] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1089.334207][T19772] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:19:50 executing program 0: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 1089.428246][T19772] loop3: p1 p2 p3 p4 [ 1089.432393][T19772] loop3: p1 start 10 is beyond EOD, truncated [ 1089.439103][T19772] loop3: p2 start 25 is beyond EOD, truncated [ 1089.445658][T19772] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1089.452405][T19772] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:19:50 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{0x0, 0x0, 0x1c0}]) 12:19:50 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8205e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:19:50 executing program 2: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = gettid() readv(0xffffffffffffffff, &(0x7f0000000580), 0x3c1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="93b20000000000000000010000000000000001410000001c001700020000000000006574683a73797a6b616c6c657231"], 0x38}}, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, r2, 0x20, 0x70bd2a, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x5156975f9c69b8f7}, 0x40084) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x135}) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r3, 0x0, 0x0) [ 1089.565442][ T153] loop3: p1 p2 p3 p4 [ 1089.575706][ T153] loop3: p1 start 10 is beyond EOD, truncated [ 1089.588312][ T153] loop3: p2 start 25 is beyond EOD, truncated [ 1089.594505][ T153] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1089.601732][ T153] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:19:50 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{0x0, 0x0, 0x1c0}]) [ 1089.726879][T19808] tipc: Enabling of bearer rejected, failed to enable media [ 1089.765274][T19805] loop3: p1 p2 p3 p4 [ 1089.769513][T19805] loop3: p1 start 10 is beyond EOD, truncated 12:19:50 executing program 2: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = gettid() readv(0xffffffffffffffff, &(0x7f0000000580), 0x3c1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="93b20000000000000000010000000000000001410000001c001700020000000000006574683a73797a6b616c6c657231"], 0x38}}, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, r2, 0x20, 0x70bd2a, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x5156975f9c69b8f7}, 0x40084) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x135}) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r3, 0x0, 0x0) [ 1089.776396][T19805] loop3: p2 start 25 is beyond EOD, truncated [ 1089.782825][T19805] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1089.790208][T19805] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1089.804702][T19814] tipc: Enabling of bearer rejected, failed to enable media 12:19:50 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{0x0, 0x0, 0x1c0}]) 12:19:53 executing program 5: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:19:53 executing program 2: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = gettid() readv(0xffffffffffffffff, &(0x7f0000000580), 0x3c1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="93b20000000000000000010000000000000001410000001c001700020000000000006574683a73797a6b616c6c657231"], 0x38}}, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, r2, 0x20, 0x70bd2a, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x5156975f9c69b8f7}, 0x40084) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x135}) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r3, 0x0, 0x0) 12:19:53 executing program 4: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@private0, 0x6b}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x2, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:19:53 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8206e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:19:53 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080), 0x0, 0x1c0}]) [ 1092.329997][T19825] tipc: Enabling of bearer rejected, failed to enable media [ 1092.475801][T19833] loop3: p1 p2 p3 p4 [ 1092.479998][T19833] loop3: p1 start 10 is beyond EOD, truncated [ 1092.487461][T19833] loop3: p2 start 25 is beyond EOD, truncated [ 1092.493579][T19833] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1092.500836][T19833] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:19:53 executing program 0: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:19:53 executing program 5: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:19:53 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080), 0x0, 0x1c0}]) 12:19:53 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8207e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:19:53 executing program 0: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f", 0x1}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:19:53 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8208e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:19:53 executing program 0: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f", 0x1}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 1092.640955][T19842] loop3: p1 p2 p3 p4 [ 1092.645213][T19842] loop3: p1 start 10 is beyond EOD, truncated [ 1092.651383][T19842] loop3: p2 start 25 is beyond EOD, truncated [ 1092.657877][T19842] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1092.664972][T19842] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:19:53 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080), 0x0, 0x1c0}]) [ 1092.806296][T19861] loop3: p1 p2 p3 p4 [ 1092.810500][T19861] loop3: p1 start 10 is beyond EOD, truncated [ 1092.817212][T19861] loop3: p2 start 25 is beyond EOD, truncated [ 1092.824833][T19861] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1092.831640][T19861] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1092.964723][T19861] loop3: p1 p2 p3 p4 [ 1092.969035][T19861] loop3: p1 start 10 is beyond EOD, truncated [ 1092.975652][T19861] loop3: p2 start 25 is beyond EOD, truncated [ 1092.981756][T19861] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1092.988947][T19861] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:19:56 executing program 2: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = gettid() readv(0xffffffffffffffff, &(0x7f0000000580), 0x3c1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="93b20000000000000000010000000000000001410000001c001700020000000000006574683a73797a6b616c6c657231"], 0x38}}, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, r2, 0x20, 0x70bd2a, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x5156975f9c69b8f7}, 0x40084) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x135}) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r3, 0x0, 0x0) 12:19:56 executing program 4: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@private0, 0x6b}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x2, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:19:56 executing program 0: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f", 0x1}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:19:56 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffffa500e931190000000000000680ff", 0x20, 0x1c0}]) 12:19:56 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8209e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1095.362561][T19869] tipc: Enabling of bearer rejected, failed to enable media [ 1095.527311][T19883] loop3: p1 p2 p3 p4 [ 1095.531478][T19883] loop3: p1 start 10 is beyond EOD, truncated [ 1095.538203][T19883] loop3: p2 start 25 is beyond EOD, truncated [ 1095.544643][T19883] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1095.551403][T19883] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:19:56 executing program 5: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:19:56 executing program 2: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = gettid() readv(0xffffffffffffffff, &(0x7f0000000580), 0x3c1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="93b20000000000000000010000000000000001410000001c001700020000000000006574683a73797a6b616c6c657231"], 0x38}}, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, r2, 0x20, 0x70bd2a, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x5156975f9c69b8f7}, 0x40084) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x135}) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r3, 0x0, 0x0) 12:19:56 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffffa500e931190000000000000680ff", 0x20, 0x1c0}]) 12:19:56 executing program 2: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = gettid() readv(0xffffffffffffffff, &(0x7f0000000580), 0x3c1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="93b20000000000000000010000000000000001410000001c001700020000000000006574683a73797a6b616c6c657231"], 0x38}}, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, r2, 0x20, 0x70bd2a, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x5156975f9c69b8f7}, 0x40084) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x135}) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r3, 0x0, 0x0) [ 1095.619102][T19890] tipc: Enabling of bearer rejected, failed to enable media [ 1095.645142][T19883] loop3: p1 p2 p3 p4 [ 1095.649321][T19883] loop3: p1 start 10 is beyond EOD, truncated [ 1095.656288][T19883] loop3: p2 start 25 is beyond EOD, truncated [ 1095.662564][T19883] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1095.670033][T19883] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:19:56 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffffa500e931190000000000000680ff", 0x20, 0x1c0}]) 12:19:56 executing program 2: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = gettid() readv(0xffffffffffffffff, &(0x7f0000000580), 0x3c1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="93b20000000000000000010000000000000001410000001c001700020000000000006574683a73797a6b616c6c657231"], 0x38}}, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, r2, 0x20, 0x70bd2a, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x5156975f9c69b8f7}, 0x40084) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r3, 0x0, 0x0) 12:19:56 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff820ae931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1095.710881][T19898] tipc: Enabling of bearer rejected, failed to enable media [ 1095.808688][T19904] tipc: Enabling of bearer rejected, failed to enable media [ 1095.844642][ T153] loop3: p1 p2 p3 p4 [ 1095.848862][ T153] loop3: p1 start 10 is beyond EOD, truncated 12:19:56 executing program 2: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = gettid() readv(0xffffffffffffffff, &(0x7f0000000580), 0x3c1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="93b20000000000000000010000000000000001410000001c001700020000000000006574683a73797a6b616c6c657231"], 0x38}}, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, r2, 0x20, 0x70bd2a, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x5156975f9c69b8f7}, 0x40084) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r3, 0x0, 0x0) [ 1095.855697][ T153] loop3: p2 start 25 is beyond EOD, truncated [ 1095.861983][ T153] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1095.869253][ T153] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1095.886962][T19909] tipc: Enabling of bearer rejected, failed to enable media [ 1095.964524][T19908] loop3: p1 p2 p3 p4 [ 1095.968743][T19908] loop3: p1 start 10 is beyond EOD, truncated [ 1095.975318][T19908] loop3: p2 start 25 is beyond EOD, truncated [ 1095.981971][T19908] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1095.989155][T19908] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1095.999993][ T153] loop3: p1 p2 p3 p4 [ 1096.004325][ T153] loop3: p1 start 10 is beyond EOD, truncated [ 1096.010417][ T153] loop3: p2 start 25 is beyond EOD, truncated [ 1096.017543][ T153] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1096.024686][ T153] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1096.114303][T19908] loop3: p1 p2 p3 p4 [ 1096.118480][T19908] loop3: p1 start 10 is beyond EOD, truncated [ 1096.125040][T19908] loop3: p2 start 25 is beyond EOD, truncated [ 1096.131219][T19908] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1096.138382][T19908] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:19:59 executing program 4: gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@private0, 0x6b}) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(0x0, 0x39) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 12:19:59 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffffa500e931190000000000000680ffffffa9000000e100e2ff877700720030", 0x30, 0x1c0}]) 12:19:59 executing program 2: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = gettid() readv(0xffffffffffffffff, &(0x7f0000000580), 0x3c1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="93b20000000000000000010000000000000001410000001c001700020000000000006574683a73797a6b616c6c657231"], 0x38}}, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, r2, 0x20, 0x70bd2a, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x5156975f9c69b8f7}, 0x40084) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r3, 0x0, 0x0) 12:19:59 executing program 0: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 1098.449089][T19922] tipc: Enabling of bearer rejected, failed to enable media 12:19:59 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff820be931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:19:59 executing program 5: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:19:59 executing program 2: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = gettid() readv(0xffffffffffffffff, &(0x7f0000000580), 0x3c1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="93b20000000000000000010000000000000001410000001c001700020000000000006574683a73797a6b616c6c657231"], 0x38}}, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, r2, 0x20, 0x70bd2a, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x5156975f9c69b8f7}, 0x40084) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x135}) ptrace$setopts(0x4206, r3, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r3, 0x0, 0x0) 12:19:59 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffffa500e931190000000000000680ffffffa9000000e100e2ff877700720030", 0x30, 0x1c0}]) 12:19:59 executing program 2: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = gettid() readv(0xffffffffffffffff, &(0x7f0000000580), 0x3c1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="93b20000000000000000010000000000000001410000001c001700020000000000006574683a73797a6b616c6c657231"], 0x38}}, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, r2, 0x20, 0x70bd2a, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x5156975f9c69b8f7}, 0x40084) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x135}) ptrace$setopts(0x4206, r3, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r3, 0x0, 0x0) [ 1098.664845][T19934] tipc: Enabling of bearer rejected, failed to enable media 12:19:59 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffffa500e931190000000000000680ffffffa9000000e100e2ff877700720030", 0x30, 0x1c0}]) [ 1098.754206][T19933] loop3: p1 p2 p3 p4 [ 1098.758417][T19933] loop3: p1 start 10 is beyond EOD, truncated [ 1098.767882][T19933] loop3: p2 start 25 is beyond EOD, truncated [ 1098.777085][T19933] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1098.780401][T19945] tipc: Enabling of bearer rejected, failed to enable media [ 1098.785728][T19933] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:19:59 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff820ce931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:19:59 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffffa500e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff0000", 0x38, 0x1c0}]) [ 1099.064227][T19950] loop3: p1 p2 p3 p4 [ 1099.068434][T19950] loop3: p1 start 10 is beyond EOD, truncated [ 1099.074971][T19950] loop3: p2 start 25 is beyond EOD, truncated [ 1099.081109][T19950] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1099.088220][T19950] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1099.246865][T19950] loop3: p1 p2 p3 p4 [ 1099.253037][T19950] loop3: p1 start 10 is beyond EOD, truncated [ 1099.259151][T19950] loop3: p2 start 25 is beyond EOD, truncated [ 1099.265294][T19950] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1099.272046][T19950] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:20:02 executing program 4: gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@private0, 0x6b}) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(0x0, 0x39) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 12:20:02 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffffa500e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff0000", 0x38, 0x1c0}]) 12:20:02 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff820de931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:20:02 executing program 0: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:20:02 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffffa500e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff0000", 0x38, 0x1c0}]) [ 1101.457494][T19958] loop3: p1 p2 p3 p4 [ 1101.461701][T19958] loop3: p1 start 10 is beyond EOD, truncated [ 1101.470357][T19958] loop3: p2 start 25 is beyond EOD, truncated [ 1101.476844][T19958] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1101.483981][T19958] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:20:02 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffffa500e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff000000000080", 0x3c, 0x1c0}]) 12:20:02 executing program 5: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 1101.644567][ T153] loop3: p1 p2 p3 p4 [ 1101.648860][ T153] loop3: p1 start 10 is beyond EOD, truncated [ 1101.655801][ T153] loop3: p2 start 25 is beyond EOD, truncated [ 1101.666175][ T153] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1101.672994][ T153] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:20:02 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff820ee931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:20:02 executing program 2: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = gettid() readv(0xffffffffffffffff, &(0x7f0000000580), 0x3c1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="93b20000000000000000010000000000000001410000001c001700020000000000006574683a73797a6b616c6c657231"], 0x38}}, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, r2, 0x20, 0x70bd2a, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x5156975f9c69b8f7}, 0x40084) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x135}) ptrace$setopts(0x4206, r3, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r3, 0x0, 0x0) 12:20:02 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffffa500e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff000000000080", 0x3c, 0x1c0}]) 12:20:02 executing program 2: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = gettid() readv(0xffffffffffffffff, &(0x7f0000000580), 0x3c1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="93b20000000000000000010000000000000001410000001c001700020000000000006574683a73797a6b616c6c657231"], 0x38}}, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, r2, 0x20, 0x70bd2a, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x5156975f9c69b8f7}, 0x40084) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) dup(r4) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x135}) ptrace$setopts(0x4206, r3, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r3, 0x0, 0x0) [ 1101.843489][T19985] tipc: Enabling of bearer rejected, failed to enable media 12:20:02 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffffa500e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff000000000080", 0x3c, 0x1c0}]) [ 1101.969096][T19986] loop3: p1 p2 p3 p4 [ 1101.969444][T19990] tipc: Enabling of bearer rejected, failed to enable media [ 1101.974670][T19986] loop3: p1 start 10 is beyond EOD, truncated [ 1101.988020][T19986] loop3: p2 start 25 is beyond EOD, truncated [ 1101.994104][T19986] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1102.000856][T19986] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1102.163723][T19986] loop3: p1 p2 p3 p4 [ 1102.167910][T19986] loop3: p1 start 10 is beyond EOD, truncated [ 1102.174049][T19986] loop3: p2 start 25 is beyond EOD, truncated [ 1102.180116][T19986] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1102.186926][T19986] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:20:05 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8210e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:20:05 executing program 4: gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@private0, 0x6b}) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(0x0, 0x39) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 12:20:05 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffffa500e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da", 0x3e, 0x1c0}]) [ 1104.474324][T19999] loop3: p1 p2 p3 p4 [ 1104.478642][T19999] loop3: p1 start 10 is beyond EOD, truncated [ 1104.485034][T19999] loop3: p2 start 25 is beyond EOD, truncated [ 1104.491182][T19999] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1104.498221][T19999] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:20:05 executing program 0: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:20:05 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffffa500e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da", 0x3e, 0x1c0}]) 12:20:05 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8211e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:20:05 executing program 5: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 1104.665900][T20015] loop3: p1 p2 p3 p4 [ 1104.670118][T20015] loop3: p1 start 10 is beyond EOD, truncated [ 1104.679508][T20015] loop3: p2 start 25 is beyond EOD, truncated [ 1104.685980][T20015] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1104.692766][T20015] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:20:05 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffffa500e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da", 0x3e, 0x1c0}]) 12:20:05 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8212e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1104.846392][T20025] loop3: p1 p2 p3 p4 [ 1104.850637][T20025] loop3: p1 start 10 is beyond EOD, truncated [ 1104.857332][T20025] loop3: p2 start 25 is beyond EOD, truncated [ 1104.863698][T20025] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1104.870547][T20025] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1104.879236][ T153] loop3: p1 p2 p3 p4 [ 1104.883498][ T153] loop3: p1 start 10 is beyond EOD, truncated [ 1104.889646][ T153] loop3: p2 start 25 is beyond EOD, truncated 12:20:05 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffffa500e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55", 0x3f, 0x1c0}]) [ 1104.896059][ T153] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1104.902882][ T153] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:20:05 executing program 2: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = gettid() readv(0xffffffffffffffff, &(0x7f0000000580), 0x3c1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="93b20000000000000000010000000000000001410000001c001700020000000000006574683a73797a6b616c6c657231"], 0x38}}, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, r2, 0x20, 0x70bd2a, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x5156975f9c69b8f7}, 0x40084) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) dup(r4) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x135}) ptrace$setopts(0x4206, r3, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r3, 0x0, 0x0) [ 1105.010019][T20025] loop3: p1 p2 p3 p4 [ 1105.014229][T20025] loop3: p1 start 10 is beyond EOD, truncated [ 1105.020529][T20025] loop3: p2 start 25 is beyond EOD, truncated [ 1105.022827][T20033] tipc: Enabling of bearer rejected, failed to enable media [ 1105.027545][T20025] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1105.042278][T20025] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:20:05 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8213e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:20:05 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffffa500e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55", 0x3f, 0x1c0}]) [ 1105.193994][ T153] loop3: p1 p2 p3 p4 [ 1105.198123][ T153] loop3: p1 start 10 is beyond EOD, truncated [ 1105.206876][ T153] loop3: p2 start 25 is beyond EOD, truncated [ 1105.213274][ T153] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1105.220039][ T153] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1105.404815][T20037] loop3: p1 p2 p3 p4 [ 1105.409036][T20037] loop3: p1 start 10 is beyond EOD, truncated [ 1105.415468][T20037] loop3: p2 start 25 is beyond EOD, truncated [ 1105.421593][T20037] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1105.428488][T20037] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1105.473733][ T153] loop3: p1 p2 p3 p4 [ 1105.478794][ T153] loop3: p1 start 10 is beyond EOD, truncated [ 1105.485496][ T153] loop3: p2 start 25 is beyond EOD, truncated [ 1105.491622][ T153] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1105.499797][ T153] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:20:08 executing program 4: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@private0, 0x6b}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:20:08 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffffa500e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55", 0x3f, 0x1c0}]) 12:20:08 executing program 0: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:20:08 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8222e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:20:08 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffffa500e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40}]) 12:20:08 executing program 5: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0xffffffffffffffff, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 1107.653420][T20052] loop3: p1 p2 p3 p4 [ 1107.658718][T20052] loop3: p1 start 10 is beyond EOD, truncated [ 1107.665487][T20052] loop3: p2 start 25 is beyond EOD, truncated [ 1107.671621][T20052] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1107.678840][T20052] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:20:08 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffffa500e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40}]) 12:20:08 executing program 5: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0xffffffffffffffff, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:20:08 executing program 5: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0xffffffffffffffff, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 1107.826477][ T153] loop3: p1 p2 p3 p4 [ 1107.830737][ T153] loop3: p1 start 10 is beyond EOD, truncated [ 1107.838978][ T153] loop3: p2 start 25 is beyond EOD, truncated [ 1107.845839][ T153] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1107.852688][ T153] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1107.865487][T20052] loop3: p1 p2 p3 p4 [ 1107.869612][T20052] loop3: p1 start 10 is beyond EOD, truncated [ 1107.876675][T20052] loop3: p2 start 25 is beyond EOD, truncated [ 1107.883286][T20052] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1107.890599][T20052] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:20:08 executing program 2: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = gettid() readv(0xffffffffffffffff, &(0x7f0000000580), 0x3c1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="93b20000000000000000010000000000000001410000001c001700020000000000006574683a73797a6b616c6c657231"], 0x38}}, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, r2, 0x20, 0x70bd2a, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x5156975f9c69b8f7}, 0x40084) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) dup(r4) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x135}) ptrace$setopts(0x4206, r3, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r3, 0x0, 0x0) 12:20:08 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffffa500e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40}]) 12:20:08 executing program 5: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 1108.065690][T20079] tipc: Enabling of bearer rejected, failed to enable media 12:20:11 executing program 4: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@private0, 0x6b}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:20:11 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8224e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1110.565576][T20087] loop3: p1 p2 p3 p4 [ 1110.569730][T20087] loop3: p1 start 10 is beyond EOD, truncated [ 1110.576343][T20087] loop3: p2 start 25 is beyond EOD, truncated [ 1110.582398][T20087] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1110.589605][T20087] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:20:11 executing program 0: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:20:11 executing program 5: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:20:11 executing program 2: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = gettid() readv(0xffffffffffffffff, &(0x7f0000000580), 0x3c1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="93b20000000000000000010000000000000001410000001c001700020000000000006574683a73797a6b616c6c657231"], 0x38}}, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, r2, 0x20, 0x70bd2a, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x5156975f9c69b8f7}, 0x40084) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x135}) ptrace$setopts(0x4206, r3, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r3, 0x0, 0x0) 12:20:11 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8222e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:20:11 executing program 5: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:20:11 executing program 5: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 1110.660911][T20099] tipc: Enabling of bearer rejected, failed to enable media [ 1110.681758][T20087] loop3: p1 p2 p3 p4 [ 1110.688049][T20087] loop3: p1 start 10 is beyond EOD, truncated [ 1110.694403][T20087] loop3: p2 start 25 is beyond EOD, truncated [ 1110.700522][T20087] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1110.707611][T20087] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1110.722101][T20098] loop1: p1 p2 p3 p4 [ 1110.726436][T20098] loop1: p1 start 10 is beyond EOD, truncated [ 1110.732912][T20098] loop1: p2 start 25 is beyond EOD, truncated [ 1110.739933][T20098] loop1: p3 start 4293001441 is beyond EOD, truncated [ 1110.746743][T20098] loop1: p4 size 3657465856 extends beyond EOD, truncated 12:20:11 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8225e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:20:11 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8222e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1110.793378][ T153] loop3: p1 p2 p3 p4 [ 1110.798625][ T153] loop3: p1 start 10 is beyond EOD, truncated [ 1110.806253][ T153] loop3: p2 start 25 is beyond EOD, truncated [ 1110.812977][ T153] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1110.819742][ T153] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1110.963802][T20115] loop3: p1 p2 p3 p4 [ 1110.967996][T20115] loop3: p1 start 10 is beyond EOD, truncated [ 1110.974322][T20115] loop3: p2 start 25 is beyond EOD, truncated [ 1110.980469][T20115] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1110.987299][T20115] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1111.015217][T20117] loop1: p1 p2 p3 p4 [ 1111.019507][T20117] loop1: p1 start 10 is beyond EOD, truncated [ 1111.025770][T20117] loop1: p2 start 25 is beyond EOD, truncated [ 1111.031928][T20117] loop1: p3 start 4293001441 is beyond EOD, truncated [ 1111.038729][T20117] loop1: p4 size 3657465856 extends beyond EOD, truncated 12:20:11 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8222e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1111.161350][T20115] loop3: p1 p2 p3 p4 [ 1111.165594][T20115] loop3: p1 start 10 is beyond EOD, truncated [ 1111.171878][T20115] loop3: p2 start 25 is beyond EOD, truncated [ 1111.178807][T20115] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1111.185937][T20115] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1111.205784][T20122] loop1: p1 p2 p3 p4 [ 1111.209204][ T153] loop3: p1 p2 p3 p4 [ 1111.209998][T20122] loop1: p1 start 10 is beyond EOD, truncated [ 1111.214092][ T153] loop3: p1 start 10 is beyond EOD, truncated [ 1111.220880][T20122] loop1: p2 start 25 is beyond EOD, truncated [ 1111.226230][ T153] loop3: p2 start 25 is beyond EOD, truncated [ 1111.232740][T20122] loop1: p3 start 4293001441 is beyond EOD, truncated [ 1111.238455][ T153] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1111.245486][T20122] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 1111.251921][ T153] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:20:12 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8248e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1111.456429][T20125] loop3: p1 p2 p3 p4 [ 1111.460601][T20125] loop3: p1 start 10 is beyond EOD, truncated [ 1111.467017][T20125] loop3: p2 start 25 is beyond EOD, truncated [ 1111.473122][T20125] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1111.479926][T20125] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:20:14 executing program 4: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@private0, 0x6b}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:20:14 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8212e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1113.554524][T20132] loop1: p1 p2 p3 p4 [ 1113.558669][T20132] loop1: p1 start 10 is beyond EOD, truncated [ 1113.565741][T20132] loop1: p2 start 25 is beyond EOD, truncated [ 1113.571834][T20132] loop1: p3 start 4293001441 is beyond EOD, truncated [ 1113.578806][T20132] loop1: p4 size 3657465856 extends beyond EOD, truncated 12:20:14 executing program 0: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:20:14 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff824ce931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:20:14 executing program 1: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = gettid() readv(0xffffffffffffffff, &(0x7f0000000580), 0x3c1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="93b20000000000000000010000000000000001410000001c001700020000000000006574683a73797a6b616c6c657231"], 0x38}}, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, r2, 0x20, 0x70bd2a, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x5156975f9c69b8f7}, 0x40084) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) dup(r4) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x135}) ptrace$setopts(0x4206, r3, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r3, 0x0, 0x0) 12:20:14 executing program 2: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = gettid() readv(0xffffffffffffffff, &(0x7f0000000580), 0x3c1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="93b20000000000000000010000000000000001410000001c001700020000000000006574683a73797a6b616c6c657231"], 0x38}}, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, r2, 0x20, 0x70bd2a, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x5156975f9c69b8f7}, 0x40084) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x135}) ptrace$setopts(0x4206, r3, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r3, 0x0, 0x0) 12:20:14 executing program 5: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:20:14 executing program 2: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = gettid() readv(0xffffffffffffffff, &(0x7f0000000580), 0x3c1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="93b20000000000000000010000000000000001410000001c001700020000000000006574683a73797a6b616c6c657231"], 0x38}}, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, r2, 0x20, 0x70bd2a, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x5156975f9c69b8f7}, 0x40084) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x135}) ptrace$setopts(0x4206, r3, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r3, 0x0, 0x0) [ 1113.744250][T20142] tipc: Enabling of bearer rejected, failed to enable media [ 1113.753959][T20150] tipc: Enabling of bearer rejected, failed to enable media [ 1113.778579][T20138] loop3: p1 p2 p3 p4 [ 1113.784977][T20138] loop3: p1 start 10 is beyond EOD, truncated 12:20:14 executing program 1: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = gettid() readv(0xffffffffffffffff, &(0x7f0000000580), 0x3c1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="93b20000000000000000010000000000000001410000001c001700020000000000006574683a73797a6b616c6c657231"], 0x38}}, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, r2, 0x20, 0x70bd2a, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x5156975f9c69b8f7}, 0x40084) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) dup(r4) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x135}) ptrace$setopts(0x4206, r3, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r3, 0x0, 0x0) [ 1113.796438][T20138] loop3: p2 start 25 is beyond EOD, truncated [ 1113.802877][T20138] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1113.802942][T20155] tipc: Enabling of bearer rejected, failed to enable media [ 1113.809679][T20138] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1113.832743][T20158] tipc: Enabling of bearer rejected, failed to enable media 12:20:14 executing program 1: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = gettid() readv(0xffffffffffffffff, &(0x7f0000000580), 0x3c1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="93b20000000000000000010000000000000001410000001c001700020000000000006574683a73797a6b616c6c657231"], 0x38}}, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, r2, 0x20, 0x70bd2a, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x5156975f9c69b8f7}, 0x40084) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) dup(r4) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x135}) ptrace$setopts(0x4206, r3, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r3, 0x0, 0x0) 12:20:14 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8260e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1113.905303][T20138] loop3: p1 p2 p3 p4 [ 1113.909525][T20138] loop3: p1 start 10 is beyond EOD, truncated [ 1113.916958][T20138] loop3: p2 start 25 is beyond EOD, truncated [ 1113.920048][T20162] tipc: Enabling of bearer rejected, failed to enable media [ 1113.923736][T20138] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1113.938757][T20138] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1114.023085][ T153] loop3: p1 p2 p3 p4 [ 1114.027450][ T153] loop3: p1 start 10 is beyond EOD, truncated [ 1114.034070][ T153] loop3: p2 start 25 is beyond EOD, truncated [ 1114.040193][ T153] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1114.047441][ T153] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:20:14 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8268e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1114.152728][T20165] loop3: p1 p2 p3 p4 [ 1114.156923][T20165] loop3: p1 start 10 is beyond EOD, truncated [ 1114.163303][T20165] loop3: p2 start 25 is beyond EOD, truncated [ 1114.169415][T20165] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1114.176436][T20165] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1114.272660][T20168] loop3: p1 p2 p3 p4 [ 1114.276832][T20168] loop3: p1 start 10 is beyond EOD, truncated [ 1114.283461][T20168] loop3: p2 start 25 is beyond EOD, truncated [ 1114.289543][T20168] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1114.296808][T20168] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:20:17 executing program 4: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@private0, 0x6b}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xffffffffffffffff, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:20:17 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff826ce931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1116.562475][T20171] loop3: p1 p2 p3 p4 [ 1116.566626][T20171] loop3: p1 start 10 is beyond EOD, truncated [ 1116.573900][T20171] loop3: p2 start 25 is beyond EOD, truncated [ 1116.579968][T20171] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1116.587287][T20171] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1116.682612][T20171] loop3: p1 p2 p3 p4 [ 1116.686998][T20171] loop3: p1 start 10 is beyond EOD, truncated [ 1116.693317][T20171] loop3: p2 start 25 is beyond EOD, truncated [ 1116.699415][T20171] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1116.706206][T20171] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:20:17 executing program 0: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0xffffffffffffffff, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:20:17 executing program 5: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:20:17 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8274e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:20:17 executing program 5: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:20:17 executing program 2: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = gettid() readv(0xffffffffffffffff, &(0x7f0000000580), 0x3c1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="93b20000000000000000010000000000000001410000001c001700020000000000006574683a73797a6b616c6c657231"], 0x38}}, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, r2, 0x20, 0x70bd2a, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x5156975f9c69b8f7}, 0x40084) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x135}) ptrace$setopts(0x4206, r3, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r3, 0x0, 0x0) [ 1116.763718][ T153] loop3: p1 p2 p3 p4 [ 1116.767853][ T153] loop3: p1 start 10 is beyond EOD, truncated [ 1116.774443][ T153] loop3: p2 start 25 is beyond EOD, truncated [ 1116.783416][ T153] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1116.790292][ T153] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:20:17 executing program 0: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0xffffffffffffffff, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:20:17 executing program 0: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0xffffffffffffffff, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 1116.851375][T20188] tipc: Enabling of bearer rejected, failed to enable media 12:20:17 executing program 0: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:20:17 executing program 1: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = gettid() readv(0xffffffffffffffff, &(0x7f0000000580), 0x3c1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="93b20000000000000000010000000000000001410000001c001700020000000000006574683a73797a6b616c6c657231"], 0x38}}, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, r2, 0x20, 0x70bd2a, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x5156975f9c69b8f7}, 0x40084) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) dup(r4) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x135}) ptrace$setopts(0x4206, r3, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$cont(0x9, r3, 0x0, 0x0) [ 1116.917709][T20191] loop3: p1 p2 p3 p4 [ 1116.921834][T20191] loop3: p1 start 10 is beyond EOD, truncated [ 1116.928828][T20191] loop3: p2 start 25 is beyond EOD, truncated [ 1116.936790][T20191] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1116.944452][T20191] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1116.981355][T20208] tipc: Enabling of bearer rejected, failed to enable media 12:20:17 executing program 0: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 1117.024823][ T153] loop3: p1 p2 p3 p4 [ 1117.029523][ T153] loop3: p1 start 10 is beyond EOD, truncated [ 1117.035902][ T153] loop3: p2 start 25 is beyond EOD, truncated [ 1117.042130][ T153] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1117.049092][ T153] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1117.057496][T20191] loop3: p1 p2 p3 p4 [ 1117.061581][T20191] loop3: p1 start 10 is beyond EOD, truncated [ 1117.068021][T20191] loop3: p2 start 25 is beyond EOD, truncated [ 1117.074442][T20191] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1117.081210][T20191] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:20:20 executing program 4: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@private0, 0x6b}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xffffffffffffffff, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:20:20 executing program 1: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = gettid() readv(0xffffffffffffffff, &(0x7f0000000580), 0x3c1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="93b20000000000000000010000000000000001410000001c001700020000000000006574683a73797a6b616c6c657231"], 0x38}}, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, r2, 0x20, 0x70bd2a, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x5156975f9c69b8f7}, 0x40084) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) dup(r4) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x135}) ptrace$setopts(0x4206, r3, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$cont(0x9, r3, 0x0, 0x0) 12:20:20 executing program 0: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:20:20 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff827ae931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:20:20 executing program 0: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 1119.528428][T20219] tipc: Enabling of bearer rejected, failed to enable media [ 1119.592288][T20216] loop3: p1 p2 p3 p4 [ 1119.596626][T20216] loop3: p1 start 10 is beyond EOD, truncated [ 1119.603990][T20216] loop3: p2 start 25 is beyond EOD, truncated [ 1119.610173][T20216] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1119.617613][T20216] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1119.762152][T20216] loop3: p1 p2 p3 p4 [ 1119.766456][T20216] loop3: p1 start 10 is beyond EOD, truncated [ 1119.772662][T20216] loop3: p2 start 25 is beyond EOD, truncated [ 1119.778812][T20216] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1119.785758][T20216] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:20:20 executing program 5: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:20:20 executing program 4: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@private0, 0x6b}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xffffffffffffffff, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:20:20 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e90a190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:20:20 executing program 2: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = gettid() readv(0xffffffffffffffff, &(0x7f0000000580), 0x3c1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="93b20000000000000000010000000000000001410000001c001700020000000000006574683a73797a6b616c6c657231"], 0x38}}, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, r2, 0x20, 0x70bd2a, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x5156975f9c69b8f7}, 0x40084) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x135}) ptrace$setopts(0x4206, r3, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r3, 0x0, 0x0) 12:20:20 executing program 4: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@private0, 0x6b}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:20:20 executing program 2: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = gettid() readv(0xffffffffffffffff, &(0x7f0000000580), 0x3c1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="93b20000000000000000010000000000000001410000001c001700020000000000006574683a73797a6b616c6c657231"], 0x38}}, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, r2, 0x20, 0x70bd2a, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x5156975f9c69b8f7}, 0x40084) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x135}) ptrace$setopts(0x4206, r3, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r3, 0x0, 0x0) [ 1119.876133][T20235] tipc: Enabling of bearer rejected, failed to enable media 12:20:20 executing program 4: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@private0, 0x6b}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 1119.936613][T20245] tipc: Enabling of bearer rejected, failed to enable media [ 1119.962173][T20240] loop3: p1 p2 p3 p4 [ 1119.969015][T20240] loop3: p1 start 10 is beyond EOD, truncated [ 1119.975440][T20240] loop3: p2 start 25 is beyond EOD, truncated [ 1119.981548][T20240] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1119.988374][T20240] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1119.996683][ T153] loop3: p1 p2 p3 p4 [ 1120.000843][ T153] loop3: p1 start 10 is beyond EOD, truncated [ 1120.007590][ T153] loop3: p2 start 25 is beyond EOD, truncated [ 1120.013952][ T153] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1120.020816][ T153] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:20:20 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e9310a0000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1120.135800][T20254] loop3: p1 p2 p3 p4 [ 1120.139889][T20254] loop3: p1 start 10 is beyond EOD, truncated [ 1120.146570][T20254] loop3: p2 start 10 is beyond EOD, truncated [ 1120.152981][T20254] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1120.159724][T20254] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:20:23 executing program 1: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = gettid() readv(0xffffffffffffffff, &(0x7f0000000580), 0x3c1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="93b20000000000000000010000000000000001410000001c001700020000000000006574683a73797a6b616c6c657231"], 0x38}}, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, r2, 0x20, 0x70bd2a, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x5156975f9c69b8f7}, 0x40084) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) dup(r4) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x135}) ptrace$setopts(0x4206, r3, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$cont(0x9, r3, 0x0, 0x0) 12:20:23 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e931640000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:20:23 executing program 1: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) gettid() readv(0xffffffffffffffff, &(0x7f0000000580), 0x3c1) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="93b20000000000000000010000000000000001410000001c001700020000000000006574683a73797a6b616c6c657231"], 0x38}}, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, r1, 0x20, 0x70bd2a, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x5156975f9c69b8f7}, 0x40084) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) dup(r3) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x135}) ptrace$setopts(0x4206, r2, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r2, 0x0, 0x0) [ 1122.573730][T20262] tipc: Enabling of bearer rejected, failed to enable media 12:20:23 executing program 0: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 1122.615921][T20258] loop3: p1 p2 p3 p4 [ 1122.620113][T20258] loop3: p1 start 10 is beyond EOD, truncated [ 1122.627268][T20258] loop3: p2 start 100 is beyond EOD, truncated [ 1122.634634][T20258] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1122.636671][T20266] tipc: Enabling of bearer rejected, failed to enable media [ 1122.644116][T20258] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1122.732310][T20258] loop3: p1 p2 p3 p4 [ 1122.736452][T20258] loop3: p1 start 10 is beyond EOD, truncated [ 1122.742997][T20258] loop3: p2 start 100 is beyond EOD, truncated [ 1122.749152][T20258] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1122.756665][T20258] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:20:23 executing program 5: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:20:23 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e931ffe0f5050000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:20:23 executing program 2: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = gettid() readv(0xffffffffffffffff, &(0x7f0000000580), 0x3c1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="93b20000000000000000010000000000000001410000001c001700020000000000006574683a73797a6b616c6c657231"], 0x38}}, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, r2, 0x20, 0x70bd2a, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x5156975f9c69b8f7}, 0x40084) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() r4 = socket$packet(0x11, 0x2, 0x300) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x135}) ptrace$setopts(0x4206, r3, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r3, 0x0, 0x0) 12:20:23 executing program 4: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@private0, 0x6b}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:20:23 executing program 2: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = gettid() readv(0xffffffffffffffff, &(0x7f0000000580), 0x3c1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="93b20000000000000000010000000000000001410000001c001700020000000000006574683a73797a6b616c6c657231"], 0x38}}, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, r2, 0x20, 0x70bd2a, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x5156975f9c69b8f7}, 0x40084) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() r4 = socket$packet(0x11, 0x2, 0x300) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x135}) ptrace$setopts(0x4206, r3, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r3, 0x0, 0x0) [ 1122.943401][T20276] tipc: Enabling of bearer rejected, failed to enable media 12:20:23 executing program 2: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = gettid() readv(0xffffffffffffffff, &(0x7f0000000580), 0x3c1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="93b20000000000000000010000000000000001410000001c001700020000000000006574683a73797a6b616c6c657231"], 0x38}}, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, r2, 0x20, 0x70bd2a, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x5156975f9c69b8f7}, 0x40084) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() r4 = socket$packet(0x11, 0x2, 0x300) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x135}) ptrace$setopts(0x4206, r3, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r3, 0x0, 0x0) [ 1123.004599][T20278] loop3: p1 p2 p3 p4 [ 1123.007415][T20286] tipc: Enabling of bearer rejected, failed to enable media [ 1123.008743][T20278] loop3: p1 start 10 is beyond EOD, truncated [ 1123.025793][T20278] loop3: p2 start 99999999 is beyond EOD, truncated [ 1123.032736][T20278] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1123.039547][T20278] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:20:23 executing program 2: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = gettid() readv(0xffffffffffffffff, &(0x7f0000000580), 0x3c1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="93b20000000000000000010000000000000001410000001c001700020000000000006574683a73797a6b616c6c657231"], 0x38}}, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, r2, 0x20, 0x70bd2a, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x5156975f9c69b8f7}, 0x40084) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x135}) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, 0x0, 0x0, 0x0) [ 1123.088303][T20291] tipc: Enabling of bearer rejected, failed to enable media [ 1123.117116][T20278] loop3: p1 p2 p3 p4 [ 1123.126902][T20278] loop3: p1 start 10 is beyond EOD, truncated 12:20:23 executing program 2: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = gettid() readv(0xffffffffffffffff, &(0x7f0000000580), 0x3c1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="93b20000000000000000010000000000000001410000001c001700020000000000006574683a73797a6b616c6c657231"], 0x38}}, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, r2, 0x20, 0x70bd2a, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x5156975f9c69b8f7}, 0x40084) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x135}) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, 0x0, 0x0, 0x0) 12:20:23 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e931190000000000002000ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1123.135589][T20278] loop3: p2 start 99999999 is beyond EOD, truncated [ 1123.142662][T20278] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1123.149474][T20278] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1123.157977][T20294] tipc: Enabling of bearer rejected, failed to enable media 12:20:24 executing program 2: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = gettid() readv(0xffffffffffffffff, &(0x7f0000000580), 0x3c1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="93b20000000000000000010000000000000001410000001c001700020000000000006574683a73797a6b616c6c657231"], 0x38}}, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, r2, 0x20, 0x70bd2a, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x5156975f9c69b8f7}, 0x40084) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x135}) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, 0x0, 0x0, 0x0) [ 1123.282097][ T153] loop3: p1 p2 p3 p4 [ 1123.286237][ T153] loop3: p1 start 10 is beyond EOD, truncated [ 1123.287960][T20297] tipc: Enabling of bearer rejected, failed to enable media [ 1123.292978][ T153] loop3: p2 start 99999999 is beyond EOD, truncated [ 1123.308171][ T153] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1123.312173][T20300] tipc: Enabling of bearer rejected, failed to enable media [ 1123.315401][ T153] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1123.432157][T20303] loop3: p1 p2 p3 p4 [ 1123.436317][T20303] loop3: p1 start 10 is beyond EOD, truncated [ 1123.442450][T20303] loop3: p2 start 25 is beyond EOD, truncated [ 1123.448635][T20303] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1123.455431][T20303] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1123.542166][T20303] loop3: p1 p2 p3 p4 [ 1123.546315][T20303] loop3: p1 start 10 is beyond EOD, truncated [ 1123.552533][T20303] loop3: p2 start 25 is beyond EOD, truncated [ 1123.558587][T20303] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1123.565345][T20303] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:20:26 executing program 1: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) gettid() readv(0xffffffffffffffff, &(0x7f0000000580), 0x3c1) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="93b20000000000000000010000000000000001410000001c001700020000000000006574683a73797a6b616c6c657231"], 0x38}}, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, r1, 0x20, 0x70bd2a, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x5156975f9c69b8f7}, 0x40084) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) dup(r3) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x135}) ptrace$setopts(0x4206, r2, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r2, 0x0, 0x0) 12:20:26 executing program 2: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = gettid() readv(0xffffffffffffffff, &(0x7f0000000580), 0x3c1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="93b20000000000000000010000000000000001410000001c001700020000000000006574683a73797a6b616c6c657231"], 0x38}}, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, r2, 0x20, 0x70bd2a, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x5156975f9c69b8f7}, 0x40084) r3 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x135}) ptrace$setopts(0x4206, r3, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r3, 0x0, 0x0) [ 1125.685061][T20310] tipc: Enabling of bearer rejected, failed to enable media [ 1125.696751][T20309] tipc: Enabling of bearer rejected, failed to enable media 12:20:26 executing program 5: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:20:26 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e931190200000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:20:26 executing program 0: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:20:26 executing program 4: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@private0, 0x6b}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, 0x0) ptrace$cont(0x9, r1, 0x0, 0x0) 12:20:26 executing program 2: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = gettid() readv(0xffffffffffffffff, &(0x7f0000000580), 0x3c1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="93b20000000000000000010000000000000001410000001c001700020000000000006574683a73797a6b616c6c657231"], 0x38}}, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, r2, 0x20, 0x70bd2a, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x5156975f9c69b8f7}, 0x40084) r3 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x135}) ptrace$setopts(0x4206, r3, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r3, 0x0, 0x0) 12:20:26 executing program 2: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = gettid() readv(0xffffffffffffffff, &(0x7f0000000580), 0x3c1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="93b20000000000000000010000000000000001410000001c001700020000000000006574683a73797a6b616c6c657231"], 0x38}}, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, r2, 0x20, 0x70bd2a, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x5156975f9c69b8f7}, 0x40084) r3 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x135}) ptrace$setopts(0x4206, r3, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r3, 0x0, 0x0) [ 1126.010924][T20318] loop3: p1 p2 p3 p4 [ 1126.015205][T20318] loop3: p1 start 10 is beyond EOD, truncated [ 1126.022689][T20327] tipc: Enabling of bearer rejected, failed to enable media [ 1126.023341][T20318] loop3: p2 start 537 is beyond EOD, truncated [ 1126.037653][T20318] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1126.044738][T20318] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1126.093407][T20332] tipc: Enabling of bearer rejected, failed to enable media [ 1126.121906][T20318] loop3: p1 p2 p3 p4 [ 1126.126008][T20318] loop3: p1 start 10 is beyond EOD, truncated [ 1126.132356][T20318] loop3: p2 start 537 is beyond EOD, truncated 12:20:26 executing program 2: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = gettid() readv(0xffffffffffffffff, &(0x7f0000000580), 0x3c1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="93b20000000000000000010000000000000001410000001c001700020000000000006574683a73797a6b616c6c657231"], 0x38}}, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x135}) ptrace$setopts(0x4206, r3, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r3, 0x0, 0x0) 12:20:26 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e931190300000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:20:26 executing program 2: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = gettid() readv(0xffffffffffffffff, &(0x7f0000000580), 0x3c1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="93b20000000000000000010000000000000001410000001c001700020000000000006574683a73797a6b616c6c657231"], 0x38}}, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x135}) ptrace$setopts(0x4206, r3, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r3, 0x0, 0x0) [ 1126.138553][T20318] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1126.150203][T20318] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1126.155237][T20334] tipc: Enabling of bearer rejected, failed to enable media [ 1126.222493][ T153] loop3: p1 p2 p3 p4 [ 1126.226701][ T153] loop3: p1 start 10 is beyond EOD, truncated [ 1126.227329][T20337] tipc: Enabling of bearer rejected, failed to enable media [ 1126.233055][ T153] loop3: p2 start 537 is beyond EOD, truncated [ 1126.247759][ T153] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1126.254671][ T153] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1126.363545][T20340] loop3: p1 p2 p3 p4 [ 1126.367640][T20340] loop3: p1 start 10 is beyond EOD, truncated [ 1126.374154][T20340] loop3: p2 start 793 is beyond EOD, truncated [ 1126.380293][T20340] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1126.387438][T20340] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:20:27 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e931190400000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1126.451625][T20340] loop3: p1 p2 p3 p4 [ 1126.455793][T20340] loop3: p1 start 10 is beyond EOD, truncated [ 1126.462257][T20340] loop3: p2 start 793 is beyond EOD, truncated [ 1126.468449][T20340] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1126.475218][T20340] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1126.611653][T20344] loop3: p1 p2 p3 p4 [ 1126.616001][T20344] loop3: p1 start 10 is beyond EOD, truncated [ 1126.622195][T20344] loop3: p2 start 1049 is beyond EOD, truncated [ 1126.628486][T20344] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1126.635298][T20344] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1126.741517][T20344] loop3: p1 p2 p3 p4 [ 1126.745670][T20344] loop3: p1 start 10 is beyond EOD, truncated [ 1126.751811][T20344] loop3: p2 start 1049 is beyond EOD, truncated [ 1126.758151][T20344] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1126.764938][T20344] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1126.773912][ T153] loop3: p1 p2 p3 p4 [ 1126.778930][ T153] loop3: p1 start 10 is beyond EOD, truncated [ 1126.785602][ T153] loop3: p2 start 1049 is beyond EOD, truncated [ 1126.792311][ T153] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1126.799217][ T153] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:20:29 executing program 1: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) gettid() readv(0xffffffffffffffff, &(0x7f0000000580), 0x3c1) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="93b20000000000000000010000000000000001410000001c001700020000000000006574683a73797a6b616c6c657231"], 0x38}}, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, r1, 0x20, 0x70bd2a, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x5156975f9c69b8f7}, 0x40084) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) dup(r3) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x135}) ptrace$setopts(0x4206, r2, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r2, 0x0, 0x0) 12:20:29 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e931190500000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1128.732332][T20352] tipc: Enabling of bearer rejected, failed to enable media [ 1128.761439][T20349] loop3: p1 p2 p3 p4 [ 1128.765661][T20349] loop3: p1 start 10 is beyond EOD, truncated [ 1128.772065][T20349] loop3: p2 start 1305 is beyond EOD, truncated [ 1128.778382][T20349] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1128.788680][T20349] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:20:29 executing program 5: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:20:29 executing program 1: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = gettid() readv(0xffffffffffffffff, &(0x7f0000000580), 0x3c1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="93b20000000000000000010000000000000001410000001c001700020000000000006574683a73797a6b616c6c657231"], 0x38}}, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, r2, 0x20, 0x70bd2a, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x5156975f9c69b8f7}, 0x40084) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) dup(r4) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x135}) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r3, 0x0, 0x0) 12:20:29 executing program 0: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:20:29 executing program 4: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@private0, 0x6b}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, 0x0) ptrace$cont(0x9, r1, 0x0, 0x0) 12:20:29 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e931190600000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1128.962708][T20356] tipc: Enabling of bearer rejected, failed to enable media 12:20:29 executing program 4: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@private0, 0x6b}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, 0x0) ptrace$cont(0x9, r1, 0x0, 0x0) 12:20:29 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e931190700000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1129.051319][T20368] loop3: p1 p2 p3 p4 [ 1129.055546][T20368] loop3: p1 start 10 is beyond EOD, truncated [ 1129.064013][T20368] loop3: p2 start 1561 is beyond EOD, truncated [ 1129.070440][T20368] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1129.077731][T20368] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:20:29 executing program 2: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = gettid() readv(0xffffffffffffffff, &(0x7f0000000580), 0x3c1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x135}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 1129.201705][T20378] loop3: p1 p2 p3 p4 [ 1129.205945][T20378] loop3: p1 start 10 is beyond EOD, truncated [ 1129.212567][T20378] loop3: p2 start 1817 is beyond EOD, truncated [ 1129.218870][T20378] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1129.228470][T20378] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:20:30 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e931190800000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:20:30 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e931190900000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1129.311781][T20385] loop3: p1 p2 p3 p4 [ 1129.315906][T20385] loop3: p1 start 10 is beyond EOD, truncated [ 1129.322403][T20385] loop3: p2 start 2073 is beyond EOD, truncated [ 1129.328650][T20385] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1129.335575][T20385] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1129.471293][T20388] loop3: p1 p2 p3 p4 [ 1129.475496][T20388] loop3: p1 start 10 is beyond EOD, truncated [ 1129.482196][T20388] loop3: p2 start 2329 is beyond EOD, truncated [ 1129.488649][T20388] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1129.496098][T20388] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1129.508014][ T153] loop3: p1 p2 p3 p4 [ 1129.512394][ T153] loop3: p1 start 10 is beyond EOD, truncated 12:20:30 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e931190a00000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1129.518552][ T153] loop3: p2 start 2329 is beyond EOD, truncated [ 1129.525201][ T153] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1129.532247][ T153] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1129.601401][T20391] loop3: p1 p2 p3 p4 [ 1129.605581][T20391] loop3: p1 start 10 is beyond EOD, truncated [ 1129.612136][T20391] loop3: p2 start 2585 is beyond EOD, truncated [ 1129.618404][T20391] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1129.625606][T20391] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:20:30 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e931190b00000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1129.721177][T20391] loop3: p1 p2 p3 p4 [ 1129.725334][T20391] loop3: p1 start 10 is beyond EOD, truncated [ 1129.731979][T20391] loop3: p2 start 2585 is beyond EOD, truncated [ 1129.738221][T20391] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1129.745396][T20391] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1129.901329][T20395] loop3: p1 p2 p3 p4 [ 1129.905629][T20395] loop3: p1 start 10 is beyond EOD, truncated [ 1129.911780][T20395] loop3: p2 start 2841 is beyond EOD, truncated [ 1129.918044][T20395] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1129.924837][T20395] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:20:32 executing program 5: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:20:32 executing program 1: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = gettid() readv(0xffffffffffffffff, &(0x7f0000000580), 0x3c1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="93b20000000000000000010000000000000001410000001c001700020000000000006574683a73797a6b616c6c657231"], 0x38}}, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, r2, 0x20, 0x70bd2a, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x5156975f9c69b8f7}, 0x40084) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) dup(r4) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x135}) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r3, 0x0, 0x0) 12:20:32 executing program 0: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:20:32 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e931190c00000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:20:32 executing program 1: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = gettid() readv(0xffffffffffffffff, &(0x7f0000000580), 0x3c1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="93b20000000000000000010000000000000001410000001c001700020000000000006574683a73797a6b616c6c657231"], 0x38}}, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, r2, 0x20, 0x70bd2a, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x5156975f9c69b8f7}, 0x40084) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) dup(r4) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x135}) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r3, 0x0, 0x0) [ 1131.999377][T20403] tipc: Enabling of bearer rejected, failed to enable media 12:20:32 executing program 4: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@private0, 0x6b}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0xffffffffffffffff, r1, 0x0, 0x0) 12:20:32 executing program 0: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 1132.050916][T20407] loop3: p1 p2 p3 p4 [ 1132.058045][T20407] loop3: p1 start 10 is beyond EOD, truncated [ 1132.072203][T20407] loop3: p2 start 3097 is beyond EOD, truncated [ 1132.084012][T20414] tipc: Enabling of bearer rejected, failed to enable media [ 1132.085861][T20407] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1132.099973][T20407] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1132.191175][T20407] loop3: p1 p2 p3 p4 [ 1132.195339][T20407] loop3: p1 start 10 is beyond EOD, truncated [ 1132.201474][T20407] loop3: p2 start 3097 is beyond EOD, truncated [ 1132.207724][T20407] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1132.214504][T20407] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:20:33 executing program 2: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = gettid() readv(0xffffffffffffffff, &(0x7f0000000580), 0x3c1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x135}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:20:33 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e931190d00000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:20:33 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e931190e00000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1132.372178][T20429] loop3: p1 p2 p3 p4 [ 1132.376429][T20429] loop3: p1 start 10 is beyond EOD, truncated [ 1132.382904][T20429] loop3: p2 start 3353 is beyond EOD, truncated [ 1132.389397][T20429] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1132.396285][T20429] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1132.491136][T20434] loop3: p1 p2 p3 p4 [ 1132.496393][T20434] loop3: p1 start 10 is beyond EOD, truncated [ 1132.502643][T20434] loop3: p2 start 3609 is beyond EOD, truncated [ 1132.508963][T20434] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1132.515788][T20434] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:20:33 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e931191000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1132.610892][T20434] loop3: p1 p2 p3 p4 [ 1132.615065][T20434] loop3: p1 start 10 is beyond EOD, truncated [ 1132.621769][T20434] loop3: p2 start 3609 is beyond EOD, truncated [ 1132.628027][T20434] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1132.635315][T20434] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:20:33 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e931191100000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1132.781031][T20438] loop3: p1 p2 p3 p4 [ 1132.785179][T20438] loop3: p1 start 10 is beyond EOD, truncated [ 1132.792368][T20438] loop3: p2 start 4121 is beyond EOD, truncated [ 1132.798757][T20438] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1132.805537][T20438] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1132.910869][T20441] loop3: p1 p2 p3 p4 [ 1132.915085][T20441] loop3: p1 start 10 is beyond EOD, truncated [ 1132.921957][T20441] loop3: p2 start 4377 is beyond EOD, truncated [ 1132.928236][T20441] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1132.935564][T20441] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:20:35 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e931191200000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:20:35 executing program 5: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x2, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:20:35 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e931191300000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:20:35 executing program 4: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@private0, 0x6b}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0xffffffffffffffff, r1, 0x0, 0x0) [ 1135.010793][T20445] loop3: p1 p2 p3 p4 [ 1135.015461][T20445] loop3: p1 start 10 is beyond EOD, truncated [ 1135.021598][T20445] loop3: p2 start 4633 is beyond EOD, truncated [ 1135.027847][T20445] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1135.034671][T20445] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:20:35 executing program 1: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = gettid() readv(0xffffffffffffffff, &(0x7f0000000580), 0x3c1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="93b20000000000000000010000000000000001410000001c001700020000000000006574683a73797a6b616c6c657231"], 0x38}}, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, r2, 0x20, 0x70bd2a, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x5156975f9c69b8f7}, 0x40084) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) dup(r4) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x135}) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r3, 0x0, 0x0) 12:20:35 executing program 0: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:20:35 executing program 1: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = gettid() readv(0xffffffffffffffff, &(0x7f0000000580), 0x3c1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="93b20000000000000000010000000000000001410000001c001700020000000000006574683a73797a6b616c6c657231"], 0x38}}, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, r2, 0x20, 0x70bd2a, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x5156975f9c69b8f7}, 0x40084) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) dup(r4) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x135}) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r3, 0x0, 0x0) [ 1135.107340][T20457] tipc: Enabling of bearer rejected, failed to enable media [ 1135.140998][T20456] loop3: p1 p2 p3 p4 [ 1135.145281][T20456] loop3: p1 start 10 is beyond EOD, truncated [ 1135.156964][T20456] loop3: p2 start 4889 is beyond EOD, truncated [ 1135.164192][T20456] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1135.171566][T20456] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1135.171915][T20465] tipc: Enabling of bearer rejected, failed to enable media 12:20:36 executing program 2: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = gettid() readv(0xffffffffffffffff, &(0x7f0000000580), 0x3c1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x135}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:20:36 executing program 1: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = gettid() readv(0xffffffffffffffff, &(0x7f0000000580), 0x3c1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="93b20000000000000000010000000000000001410000001c001700020000000000006574683a73797a6b616c6c657231"], 0x38}}, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, r2, 0x20, 0x70bd2a, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x5156975f9c69b8f7}, 0x40084) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) dup(r4) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x135}) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r3, 0x0, 0x0) 12:20:36 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e931192200000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1135.397372][T20469] tipc: Enabling of bearer rejected, failed to enable media 12:20:36 executing program 2: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = gettid() readv(0xffffffffffffffff, &(0x7f0000000580), 0x3c1) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="93b20000000000000000010000000000000001410000001c001700020000000000006574683a73797a6b616c6c657231"], 0x38}}, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x135}) ptrace$setopts(0x4206, r2, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r2, 0x0, 0x0) 12:20:36 executing program 1: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = gettid() readv(0xffffffffffffffff, &(0x7f0000000580), 0x3c1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="93b20000000000000000010000000000000001410000001c001700020000000000006574683a73797a6b616c6c657231"], 0x38}}, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, r2, 0x20, 0x70bd2a, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x5156975f9c69b8f7}, 0x40084) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) dup(r4) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r3, 0x0, 0x0) [ 1135.443521][T20472] loop3: p1 p2 p3 p4 [ 1135.447733][T20472] loop3: p1 start 10 is beyond EOD, truncated [ 1135.454092][T20472] loop3: p2 start 8729 is beyond EOD, truncated [ 1135.460430][T20472] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1135.467393][T20472] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1135.488631][T20481] tipc: Enabling of bearer rejected, failed to enable media 12:20:36 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e931192400000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1135.534491][T20472] loop3: p1 p2 p3 p4 [ 1135.538711][T20472] loop3: p1 start 10 is beyond EOD, truncated [ 1135.545325][T20472] loop3: p2 start 8729 is beyond EOD, truncated [ 1135.551982][T20472] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1135.558783][T20472] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1135.652693][ T153] loop3: p1 p2 p3 p4 [ 1135.656831][ T153] loop3: p1 start 10 is beyond EOD, truncated [ 1135.663411][ T153] loop3: p2 start 8729 is beyond EOD, truncated [ 1135.669639][ T153] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1135.676948][ T153] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1135.740828][T20487] loop3: p1 p2 p3 p4 [ 1135.745454][T20487] loop3: p1 start 10 is beyond EOD, truncated [ 1135.751844][T20487] loop3: p2 start 9241 is beyond EOD, truncated [ 1135.759492][T20487] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1135.766272][T20487] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:20:38 executing program 5: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x2, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:20:38 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e931192500000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:20:38 executing program 4: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@private0, 0x6b}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0xffffffffffffffff, r1, 0x0, 0x0) 12:20:38 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e931194800000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1138.040454][T20494] loop3: p1 p2 p3 p4 [ 1138.044596][T20494] loop3: p1 start 10 is beyond EOD, truncated [ 1138.051613][T20494] loop3: p2 start 9497 is beyond EOD, truncated [ 1138.057895][T20494] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1138.064683][T20494] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:20:38 executing program 0: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:20:38 executing program 4: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@private0, 0x6b}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, 0x0, 0x0, 0x0) 12:20:38 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e931194c00000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1138.160717][T20501] loop3: p1 p2 p3 p4 [ 1138.164891][T20501] loop3: p1 start 10 is beyond EOD, truncated [ 1138.171104][T20501] loop3: p2 start 18457 is beyond EOD, truncated [ 1138.177495][T20501] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1138.184308][T20501] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1138.320382][T20512] loop3: p1 p2 p3 p4 [ 1138.324561][T20512] loop3: p1 start 10 is beyond EOD, truncated [ 1138.330916][T20512] loop3: p2 start 19481 is beyond EOD, truncated [ 1138.337313][T20512] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1138.344089][T20512] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:20:39 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e931196000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1138.460441][T20512] loop3: p1 p2 p3 p4 [ 1138.464902][T20512] loop3: p1 start 10 is beyond EOD, truncated [ 1138.471182][T20512] loop3: p2 start 19481 is beyond EOD, truncated [ 1138.477525][T20512] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1138.488300][T20512] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1138.497602][ T153] loop3: p1 p2 p3 p4 [ 1138.501925][ T153] loop3: p1 start 10 is beyond EOD, truncated 12:20:39 executing program 1: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = gettid() readv(0xffffffffffffffff, &(0x7f0000000580), 0x3c1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="93b20000000000000000010000000000000001410000001c001700020000000000006574683a73797a6b616c6c657231"], 0x38}}, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, r2, 0x20, 0x70bd2a, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x5156975f9c69b8f7}, 0x40084) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) dup(r4) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r3, 0x0, 0x0) 12:20:39 executing program 2: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = gettid() readv(0xffffffffffffffff, &(0x7f0000000580), 0x3c1) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="93b20000000000000000010000000000000001410000001c001700020000000000006574683a73797a6b616c6c657231"], 0x38}}, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x135}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 1138.508112][ T153] loop3: p2 start 19481 is beyond EOD, truncated [ 1138.515007][ T153] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1138.523229][ T153] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1138.527998][T20516] tipc: Enabling of bearer rejected, failed to enable media [ 1138.591563][T20522] loop3: p1 p2 p3 p4 [ 1138.595639][T20522] loop3: p1 start 10 is beyond EOD, truncated [ 1138.608657][T20522] loop3: p2 start 24601 is beyond EOD, truncated [ 1138.615533][T20522] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1138.622868][T20522] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:20:39 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e931196800000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1138.720302][T20522] loop3: p1 p2 p3 p4 [ 1138.724571][T20522] loop3: p1 start 10 is beyond EOD, truncated [ 1138.730740][T20522] loop3: p2 start 24601 is beyond EOD, truncated [ 1138.737104][T20522] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1138.743913][T20522] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1138.870575][T20527] loop3: p1 p2 p3 p4 [ 1138.874677][T20527] loop3: p1 start 10 is beyond EOD, truncated [ 1138.881293][T20527] loop3: p2 start 26649 is beyond EOD, truncated [ 1138.887634][T20527] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1138.894881][T20527] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1138.906542][ T153] loop3: p1 p2 p3 p4 [ 1138.910897][ T153] loop3: p1 start 10 is beyond EOD, truncated 12:20:39 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e931196c00000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1138.916979][ T153] loop3: p2 start 26649 is beyond EOD, truncated [ 1138.923731][ T153] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1138.930760][ T153] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1139.031027][T20530] loop3: p1 p2 p3 p4 [ 1139.035400][T20530] loop3: p1 start 10 is beyond EOD, truncated [ 1139.041631][T20530] loop3: p2 start 27673 is beyond EOD, truncated [ 1139.047952][T20530] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1139.054767][T20530] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1139.141368][T20530] loop3: p1 p2 p3 p4 [ 1139.145572][T20530] loop3: p1 start 10 is beyond EOD, truncated [ 1139.151803][T20530] loop3: p2 start 27673 is beyond EOD, truncated [ 1139.158146][T20530] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1139.164946][T20530] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1139.230619][ T153] loop3: p1 p2 p3 p4 [ 1139.234770][ T153] loop3: p1 start 10 is beyond EOD, truncated [ 1139.241296][ T153] loop3: p2 start 27673 is beyond EOD, truncated [ 1139.247652][ T153] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1139.254850][ T153] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:20:41 executing program 5: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x2, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:20:41 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e931197400000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:20:41 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e931197a00000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1141.040350][T20538] loop3: p1 p2 p3 p4 [ 1141.044478][T20538] loop3: p1 start 10 is beyond EOD, truncated [ 1141.051984][T20538] loop3: p2 start 29721 is beyond EOD, truncated [ 1141.058335][T20538] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1141.065545][T20538] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:20:41 executing program 4: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@private0, 0x6b}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, 0x0, 0x0, 0x0) 12:20:41 executing program 0: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 1141.190269][T20542] loop3: p1 p2 p3 p4 [ 1141.198892][T20542] loop3: p1 start 10 is beyond EOD, truncated [ 1141.205758][T20542] loop3: p2 start 31257 is beyond EOD, truncated [ 1141.212401][T20542] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1141.219318][T20542] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:20:41 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e931199000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:20:42 executing program 0: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x2, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:20:42 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e931190402000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1141.322264][T20551] loop3: p1 p2 p3 p4 [ 1141.326406][T20551] loop3: p1 start 10 is beyond EOD, truncated [ 1141.333350][T20551] loop3: p2 start 36889 is beyond EOD, truncated [ 1141.339822][T20551] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1141.346779][T20551] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1141.400640][T20558] loop3: p1 p2 p3 p4 [ 1141.404836][T20558] loop3: p1 start 10 is beyond EOD, truncated [ 1141.411379][T20558] loop3: p2 start 132121 is beyond EOD, truncated [ 1141.417821][T20558] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1141.424616][T20558] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:20:42 executing program 1: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = gettid() readv(0xffffffffffffffff, &(0x7f0000000580), 0x3c1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="93b20000000000000000010000000000000001410000001c001700020000000000006574683a73797a6b616c6c657231"], 0x38}}, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, r2, 0x20, 0x70bd2a, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x5156975f9c69b8f7}, 0x40084) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) dup(r4) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r3, 0x0, 0x0) 12:20:42 executing program 2: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = gettid() sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="93b20000000000000000010000000000000001410000001c001700020000000000006574683a73797a6b616c6c657231"], 0x38}}, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x135}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:20:42 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e931190003000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:20:42 executing program 1: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = gettid() readv(0xffffffffffffffff, &(0x7f0000000580), 0x3c1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="93b20000000000000000010000000000000001410000001c001700020000000000006574683a73797a6b616c6c657231"], 0x38}}, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, r2, 0x20, 0x70bd2a, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x5156975f9c69b8f7}, 0x40084) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) dup(r4) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x135}) ptrace$setopts(0x4206, r3, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r3, 0x0, 0x0) [ 1141.548003][T20561] tipc: Enabling of bearer rejected, failed to enable media [ 1141.623409][T20567] loop3: p1 p2 p3 p4 [ 1141.627570][T20567] loop3: p1 start 10 is beyond EOD, truncated [ 1141.634298][T20567] loop3: p2 start 196633 is beyond EOD, truncated [ 1141.634593][T20573] tipc: Enabling of bearer rejected, failed to enable media [ 1141.641360][T20567] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1141.656816][T20567] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1141.740198][T20567] loop3: p1 p2 p3 p4 [ 1141.745407][T20567] loop3: p1 start 10 is beyond EOD, truncated [ 1141.752115][T20567] loop3: p2 start 196633 is beyond EOD, truncated [ 1141.758567][T20567] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1141.765734][T20567] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1141.774953][ T153] loop3: p1 p2 p3 p4 [ 1141.780257][ T153] loop3: p1 start 10 is beyond EOD, truncated [ 1141.786386][ T153] loop3: p2 start 196633 is beyond EOD, truncated [ 1141.793252][ T153] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1141.800379][ T153] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:20:44 executing program 5: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x2, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:20:44 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e931190204000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1144.052644][T20579] loop3: p1 p2 p3 p4 [ 1144.056872][T20579] loop3: p1 start 10 is beyond EOD, truncated [ 1144.063590][T20579] loop3: p2 start 262681 is beyond EOD, truncated [ 1144.070507][T20579] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1144.077263][T20579] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:20:44 executing program 4: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@private0, 0x6b}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, 0x0, 0x0, 0x0) 12:20:44 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e931190604000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:20:44 executing program 4: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = gettid() readv(0xffffffffffffffff, &(0x7f0000000580), 0x3c1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x135}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 1144.179977][T20579] loop3: p1 p2 p3 p4 [ 1144.184161][T20579] loop3: p1 start 10 is beyond EOD, truncated [ 1144.190867][T20579] loop3: p2 start 262681 is beyond EOD, truncated [ 1144.197292][T20579] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1144.204492][T20579] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:20:45 executing program 4: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = gettid() readv(0xffffffffffffffff, &(0x7f0000000580), 0x3c1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x135}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:20:45 executing program 0: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x2, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:20:45 executing program 4: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = gettid() readv(0xffffffffffffffff, &(0x7f0000000580), 0x3c1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x135}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:20:45 executing program 0: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x2, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 1144.329897][T20587] loop3: p1 p2 p3 p4 [ 1144.340550][T20587] loop3: p1 start 10 is beyond EOD, truncated [ 1144.346681][T20587] loop3: p2 start 263705 is beyond EOD, truncated [ 1144.353190][T20587] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1144.360199][T20587] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1144.441155][T20587] loop3: p1 p2 p3 p4 [ 1144.445308][T20587] loop3: p1 start 10 is beyond EOD, truncated [ 1144.452257][T20587] loop3: p2 start 263705 is beyond EOD, truncated [ 1144.458924][T20587] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1144.466205][T20587] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1144.500135][ T153] loop3: p1 p2 p3 p4 [ 1144.504279][ T153] loop3: p1 start 10 is beyond EOD, truncated [ 1144.510386][ T153] loop3: p2 start 263705 is beyond EOD, truncated [ 1144.516796][ T153] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1144.523569][ T153] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:20:45 executing program 2: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = gettid() sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="93b20000000000000000010000000000000001410000001c001700020000000000006574683a73797a6b616c6c657231"], 0x38}}, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x135}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:20:45 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e931198004000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:20:45 executing program 1: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = gettid() readv(0xffffffffffffffff, &(0x7f0000000580), 0x3c1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="93b20000000000000000010000000000000001410000001c001700020000000000006574683a73797a6b616c6c657231"], 0x38}}, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, r2, 0x20, 0x70bd2a, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x5156975f9c69b8f7}, 0x40084) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) dup(r4) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x135}) ptrace$setopts(0x4206, r3, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r3, 0x0, 0x0) [ 1144.680251][T20610] loop3: p1 p2 p3 p4 [ 1144.684400][T20610] loop3: p1 start 10 is beyond EOD, truncated [ 1144.693056][T20610] loop3: p2 start 294937 is beyond EOD, truncated [ 1144.699986][T20610] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1144.706084][T20615] tipc: Enabling of bearer rejected, failed to enable media [ 1144.706785][T20610] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:20:47 executing program 5: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x2, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:20:47 executing program 2: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = gettid() sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="93b20000000000000000010000000000000001410000001c001700020000000000006574683a73797a6b616c6c657231"], 0x38}}, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x135}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:20:47 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e93119f504000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:20:47 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e931190005000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1147.061217][T20623] loop3: p1 p2 p3 p4 [ 1147.066003][T20623] loop3: p1 start 10 is beyond EOD, truncated [ 1147.072314][T20623] loop3: p2 start 324889 is beyond EOD, truncated [ 1147.078747][T20623] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1147.085525][T20623] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1147.170153][T20629] loop3: p1 p2 p3 p4 [ 1147.174330][T20629] loop3: p1 start 10 is beyond EOD, truncated [ 1147.180956][T20629] loop3: p2 start 327705 is beyond EOD, truncated [ 1147.187373][T20629] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1147.194603][T20629] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:20:48 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e931190006000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1147.279998][T20629] loop3: p1 p2 p3 p4 [ 1147.284189][T20629] loop3: p1 start 10 is beyond EOD, truncated [ 1147.290778][T20629] loop3: p2 start 327705 is beyond EOD, truncated [ 1147.297252][T20629] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1147.304486][T20629] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:20:48 executing program 4: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:20:48 executing program 0: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x2, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:20:48 executing program 4: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:20:48 executing program 4: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 1147.479906][T20633] loop3: p1 p2 p3 p4 [ 1147.484324][T20633] loop3: p1 start 10 is beyond EOD, truncated [ 1147.491469][T20633] loop3: p2 start 393241 is beyond EOD, truncated [ 1147.499629][T20633] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1147.507275][T20633] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:20:48 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e931190406000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:20:48 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffffa500e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff000000000080", 0x3c, 0x1c0}]) [ 1147.647171][T20647] loop3: p1 p2 p3 p4 [ 1147.651444][T20647] loop3: p1 start 10 is beyond EOD, truncated [ 1147.657592][T20647] loop3: p2 start 394265 is beyond EOD, truncated [ 1147.664336][T20647] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1147.671276][T20647] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:20:48 executing program 1: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = gettid() readv(0xffffffffffffffff, &(0x7f0000000580), 0x3c1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="93b20000000000000000010000000000000001410000001c001700020000000000006574683a73797a6b616c6c657231"], 0x38}}, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, r2, 0x20, 0x70bd2a, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x5156975f9c69b8f7}, 0x40084) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) dup(r4) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x135}) ptrace$setopts(0x4206, r3, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r3, 0x0, 0x0) [ 1147.790301][T20654] tipc: Enabling of bearer rejected, failed to enable media 12:20:50 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e931190007000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:20:50 executing program 2: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="93b20000000000000000010000000000000001410000001c001700020000000000006574683a73797a6b616c6c657231"], 0x38}}, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x135}) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(0x0, 0x39) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 12:20:50 executing program 5: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x2, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:20:50 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffffbf00e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1150.075655][T20658] loop3: p1 p2 p3 p4 [ 1150.080149][T20658] loop3: p1 start 10 is beyond EOD, truncated [ 1150.086274][T20658] loop3: p2 start 458777 is beyond EOD, truncated [ 1150.092975][T20658] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1150.099838][T20658] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1150.109819][T20666] loop4: p1 p2 p3 p4 [ 1150.115793][T20666] loop4: p1 start 10 is beyond EOD, truncated [ 1150.125694][T20666] loop4: p2 start 25 is beyond EOD, truncated [ 1150.134714][T20666] loop4: p3 start 4293001441 is beyond EOD, truncated [ 1150.141660][T20666] loop4: p4 size 3657465856 extends beyond EOD, truncated 12:20:50 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffffbf00e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:20:50 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e931190009000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1150.289603][T20675] loop4: p1 p2 p3 p4 [ 1150.293750][T20675] loop4: p1 start 10 is beyond EOD, truncated [ 1150.300359][T20675] loop4: p2 start 25 is beyond EOD, truncated [ 1150.306503][T20675] loop4: p3 start 4293001441 is beyond EOD, truncated [ 1150.313824][T20675] loop4: p4 size 3657465856 extends beyond EOD, truncated [ 1150.322417][ T153] loop4: p1 p2 p3 p4 [ 1150.326641][ T153] loop4: p1 start 10 is beyond EOD, truncated [ 1150.333169][T20677] loop3: p1 p2 p3 p4 [ 1150.337276][T20677] loop3: p1 start 10 is beyond EOD, truncated [ 1150.343410][ T153] loop4: p2 start 25 is beyond EOD, truncated [ 1150.349577][T20677] loop3: p2 start 589849 is beyond EOD, truncated [ 1150.355972][T20677] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1150.362809][ T153] loop4: p3 start 4293001441 is beyond EOD, truncated [ 1150.369588][ T153] loop4: p4 size 3657465856 extends beyond EOD, truncated [ 1150.376896][T20677] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:20:51 executing program 0: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x2, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:20:51 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffffbf00e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:20:51 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e93119000a000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:20:51 executing program 0: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x2, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 1150.559391][T20681] loop4: p1 p2 p3 p4 [ 1150.563573][T20681] loop4: p1 start 10 is beyond EOD, truncated [ 1150.571309][T20681] loop4: p2 start 25 is beyond EOD, truncated [ 1150.577540][T20681] loop4: p3 start 4293001441 is beyond EOD, truncated [ 1150.584342][T20681] loop4: p4 size 3657465856 extends beyond EOD, truncated 12:20:51 executing program 4: syz_read_part_table(0x0, 0x0, 0x0) [ 1150.618144][T20684] loop3: p1 p2 p3 p4 [ 1150.622624][T20684] loop3: p1 start 10 is beyond EOD, truncated [ 1150.628757][T20684] loop3: p2 start 655385 is beyond EOD, truncated [ 1150.635228][T20684] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1150.642144][T20684] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:20:51 executing program 1: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = gettid() readv(0xffffffffffffffff, &(0x7f0000000580), 0x3c1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="93b20000000000000000010000000000000001410000001c001700020000000000006574683a73797a6b616c6c657231"], 0x38}}, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, r2, 0x20, 0x70bd2a, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x5156975f9c69b8f7}, 0x40084) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socket$packet(0x11, 0x2, 0x300) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x135}) ptrace$setopts(0x4206, r3, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r3, 0x0, 0x0) 12:20:51 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e93119000b000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1150.829659][T20700] tipc: Enabling of bearer rejected, failed to enable media [ 1150.851872][T20701] loop3: p1 p2 p3 p4 [ 1150.855967][T20701] loop3: p1 start 10 is beyond EOD, truncated [ 1150.862584][T20701] loop3: p2 start 720921 is beyond EOD, truncated [ 1150.869273][T20701] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1150.876047][T20701] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1150.959588][T20701] loop3: p1 p2 p3 p4 [ 1150.963856][T20701] loop3: p1 start 10 is beyond EOD, truncated [ 1150.970255][T20701] loop3: p2 start 720921 is beyond EOD, truncated [ 1150.976662][T20701] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1150.983453][T20701] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:20:53 executing program 2: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="93b20000000000000000010000000000000001410000001c001700020000000000006574683a73797a6b616c6c657231"], 0x38}}, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x135}) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(0x0, 0x39) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 12:20:53 executing program 4: syz_read_part_table(0x0, 0x0, 0x0) 12:20:53 executing program 1: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = gettid() readv(0xffffffffffffffff, &(0x7f0000000580), 0x3c1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="93b20000000000000000010000000000000001410000001c001700020000000000006574683a73797a6b616c6c657231"], 0x38}}, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, r2, 0x20, 0x70bd2a, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x5156975f9c69b8f7}, 0x40084) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socket$packet(0x11, 0x2, 0x300) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x135}) ptrace$setopts(0x4206, r3, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r3, 0x0, 0x0) 12:20:53 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e93119000c000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:20:53 executing program 5: gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(0x0, 0x39) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 12:20:53 executing program 5: gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(0x0, 0x39) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 12:20:53 executing program 5: gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(0x0, 0x39) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 1153.128768][T20713] tipc: Enabling of bearer rejected, failed to enable media 12:20:54 executing program 4: syz_read_part_table(0x0, 0x0, 0x0) [ 1153.269295][T20717] loop3: p1 p2 p3 p4 [ 1153.273724][T20717] loop3: p1 start 10 is beyond EOD, truncated [ 1153.280497][T20717] loop3: p2 start 786457 is beyond EOD, truncated [ 1153.291781][T20717] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1153.302631][T20717] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1153.509443][T20717] loop3: p1 p2 p3 p4 [ 1153.513994][T20717] loop3: p1 start 10 is beyond EOD, truncated [ 1153.520606][T20717] loop3: p2 start 786457 is beyond EOD, truncated [ 1153.527026][T20717] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1153.534173][T20717] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:20:54 executing program 0: gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(0x0, 0x39) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 12:20:54 executing program 4: syz_read_part_table(0x0, 0x0, &(0x7f0000000040)) 12:20:54 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e93119000d000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:20:54 executing program 4: syz_read_part_table(0x0, 0x0, &(0x7f0000000040)) [ 1153.737921][T20741] loop3: p1 p2 p3 p4 [ 1153.742508][T20741] loop3: p1 start 10 is beyond EOD, truncated [ 1153.748756][T20741] loop3: p2 start 851993 is beyond EOD, truncated [ 1153.755262][T20741] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1153.762210][T20741] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:20:56 executing program 2: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="93b20000000000000000010000000000000001410000001c001700020000000000006574683a73797a6b616c6c657231"], 0x38}}, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x135}) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(0x0, 0x39) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 12:20:56 executing program 4: syz_read_part_table(0x0, 0x0, &(0x7f0000000040)) 12:20:56 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e93119000e000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:20:56 executing program 1: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = gettid() readv(0xffffffffffffffff, &(0x7f0000000580), 0x3c1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="93b20000000000000000010000000000000001410000001c001700020000000000006574683a73797a6b616c6c657231"], 0x38}}, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, r2, 0x20, 0x70bd2a, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x5156975f9c69b8f7}, 0x40084) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socket$packet(0x11, 0x2, 0x300) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x135}) ptrace$setopts(0x4206, r3, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r3, 0x0, 0x0) [ 1156.194472][T20761] tipc: Enabling of bearer rejected, failed to enable media 12:20:56 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{0x0, 0x0, 0x1c0}]) 12:20:57 executing program 5: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:20:57 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e931190011000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1156.259003][T20756] loop3: p1 p2 p3 p4 [ 1156.266333][T20756] loop3: p1 start 10 is beyond EOD, truncated [ 1156.272917][T20756] loop3: p2 start 917529 is beyond EOD, truncated [ 1156.279840][T20756] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1156.288690][T20756] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:20:57 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e931190012000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1156.499051][T20776] loop3: p1 p2 p3 p4 [ 1156.503226][T20776] loop3: p1 start 10 is beyond EOD, truncated [ 1156.509761][T20776] loop3: p2 start 1179673 is beyond EOD, truncated [ 1156.516306][T20776] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1156.523561][T20776] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:20:57 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{0x0, 0x0, 0x1c0}]) 12:20:57 executing program 0: gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(0x0, 0x39) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 12:20:57 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e931190013000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:20:57 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{0x0, 0x0, 0x1c0}]) [ 1156.821165][T20783] loop3: p1 p2 p3 p4 [ 1156.825300][T20783] loop3: p1 start 10 is beyond EOD, truncated [ 1156.831873][T20783] loop3: p2 start 1245209 is beyond EOD, truncated [ 1156.838693][T20783] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1156.845441][T20783] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1157.029052][T20783] loop3: p1 p2 p3 p4 [ 1157.033267][T20783] loop3: p1 start 10 is beyond EOD, truncated [ 1157.042504][T20783] loop3: p2 start 1245209 is beyond EOD, truncated [ 1157.049588][T20783] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1157.056483][T20783] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:20:59 executing program 2: r0 = gettid() sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="93b20000000000000000010000000000000001410000001c001700020000000000006574683a73797a6b616c6c657231"], 0x38}}, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x135}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:20:59 executing program 0: gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(0x0, 0x39) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 12:20:59 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080), 0x0, 0x1c0}]) 12:20:59 executing program 1: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = gettid() readv(0xffffffffffffffff, &(0x7f0000000580), 0x3c1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="93b20000000000000000010000000000000001410000001c001700020000000000006574683a73797a6b616c6c657231"], 0x38}}, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, r2, 0x20, 0x70bd2a, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x5156975f9c69b8f7}, 0x40084) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) dup(0xffffffffffffffff) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x135}) ptrace$setopts(0x4206, r3, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r3, 0x0, 0x0) 12:20:59 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e93119001f000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:21:00 executing program 5: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:21:00 executing program 1: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = gettid() readv(0xffffffffffffffff, &(0x7f0000000580), 0x3c1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="93b20000000000000000010000000000000001410000001c001700020000000000006574683a73797a6b616c6c657231"], 0x38}}, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, r2, 0x20, 0x70bd2a, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x5156975f9c69b8f7}, 0x40084) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) dup(0xffffffffffffffff) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x135}) ptrace$setopts(0x4206, r3, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r3, 0x0, 0x0) [ 1159.304021][T20810] tipc: Enabling of bearer rejected, failed to enable media [ 1159.338781][T20807] loop3: p1 p2 p3 p4 [ 1159.342978][T20807] loop3: p1 start 10 is beyond EOD, truncated [ 1159.349329][T20807] loop3: p2 start 2031641 is beyond EOD, truncated [ 1159.355847][T20807] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1159.362770][T20807] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:21:00 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080), 0x0, 0x1c0}]) [ 1159.402124][T20818] tipc: Enabling of bearer rejected, failed to enable media [ 1159.473307][T20807] loop3: p1 p2 p3 p4 [ 1159.477509][T20807] loop3: p1 start 10 is beyond EOD, truncated [ 1159.484539][T20807] loop3: p2 start 2031641 is beyond EOD, truncated [ 1159.491311][T20807] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1159.498161][T20807] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:21:00 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080), 0x0, 0x1c0}]) 12:21:00 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e931190020000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:21:00 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffffbf00e931190000000000000680ff", 0x20, 0x1c0}]) [ 1159.831708][T20828] loop3: p1 p2 p3 p4 [ 1159.835844][T20828] loop3: p1 start 10 is beyond EOD, truncated [ 1159.842381][T20828] loop3: p2 start 2097177 is beyond EOD, truncated [ 1159.849181][T20828] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1159.855944][T20828] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:21:00 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e931190022000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1160.018749][T20834] loop3: p1 p2 p3 p4 [ 1160.022976][T20834] loop3: p1 start 10 is beyond EOD, truncated [ 1160.029645][T20834] loop3: p2 start 2228249 is beyond EOD, truncated [ 1160.036254][T20834] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1160.043437][T20834] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1160.160981][T20834] loop3: p1 p2 p3 p4 [ 1160.165142][T20834] loop3: p1 start 10 is beyond EOD, truncated [ 1160.171502][T20834] loop3: p2 start 2228249 is beyond EOD, truncated [ 1160.177995][T20834] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1160.184774][T20834] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:21:03 executing program 2: r0 = gettid() sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="93b20000000000000000010000000000000001410000001c001700020000000000006574683a73797a6b616c6c657231"], 0x38}}, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x135}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:21:03 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffffbf00e931190000000000000680ff", 0x20, 0x1c0}]) 12:21:03 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e931190024000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:21:03 executing program 0: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:21:03 executing program 5: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:21:03 executing program 1: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = gettid() readv(0xffffffffffffffff, &(0x7f0000000580), 0x3c1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="93b20000000000000000010000000000000001410000001c001700020000000000006574683a73797a6b616c6c657231"], 0x38}}, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, r2, 0x20, 0x70bd2a, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x5156975f9c69b8f7}, 0x40084) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() dup(0xffffffffffffffff) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x135}) ptrace$setopts(0x4206, r3, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r3, 0x0, 0x0) 12:21:03 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffffbf00e931190000000000000680ff", 0x20, 0x1c0}]) 12:21:03 executing program 5: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xffffffffffffffff, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 1162.350031][T20841] loop3: p1 p2 p3 p4 [ 1162.355070][T20841] loop3: p1 start 10 is beyond EOD, truncated [ 1162.361254][T20841] loop3: p2 start 2359321 is beyond EOD, truncated [ 1162.367768][T20841] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1162.374725][T20841] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:21:03 executing program 1: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = gettid() readv(0xffffffffffffffff, &(0x7f0000000580), 0x3c1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="93b20000000000000000010000000000000001410000001c001700020000000000006574683a73797a6b616c6c657231"], 0x38}}, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, r2, 0x20, 0x70bd2a, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x5156975f9c69b8f7}, 0x40084) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() dup(0xffffffffffffffff) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x135}) ptrace$setopts(0x4206, r3, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r3, 0x0, 0x0) [ 1162.472891][T20857] tipc: Enabling of bearer rejected, failed to enable media 12:21:03 executing program 1: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = gettid() readv(0xffffffffffffffff, &(0x7f0000000580), 0x3c1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="93b20000000000000000010000000000000001410000001c001700020000000000006574683a73797a6b616c6c657231"], 0x38}}, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, r2, 0x20, 0x70bd2a, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x5156975f9c69b8f7}, 0x40084) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() dup(0xffffffffffffffff) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x135}) ptrace$setopts(0x4206, r3, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r3, 0x0, 0x0) 12:21:03 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e931190025000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1162.529834][T20862] tipc: Enabling of bearer rejected, failed to enable media 12:21:03 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffffbf00e931190000000000000680ffffffa9000000e100e2ff877700720030", 0x30, 0x1c0}]) [ 1162.644461][T20869] tipc: Enabling of bearer rejected, failed to enable media [ 1162.708247][T20872] loop3: p1 p2 p3 p4 [ 1162.712591][T20872] loop3: p1 start 10 is beyond EOD, truncated [ 1162.719273][T20872] loop3: p2 start 2424857 is beyond EOD, truncated [ 1162.725794][T20872] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1162.733175][T20872] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1162.908810][ T153] loop3: p1 p2 p3 p4 [ 1162.913142][ T153] loop3: p1 start 10 is beyond EOD, truncated [ 1162.919690][ T153] loop3: p2 start 2424857 is beyond EOD, truncated [ 1162.926296][ T153] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1162.933516][ T153] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1162.941860][T20872] loop3: p1 p2 p3 p4 [ 1162.945914][T20872] loop3: p1 start 10 is beyond EOD, truncated [ 1162.952455][T20872] loop3: p2 start 2424857 is beyond EOD, truncated [ 1162.959245][T20872] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1162.966001][T20872] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:21:06 executing program 2: r0 = gettid() sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x135}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:21:06 executing program 1: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = gettid() readv(0xffffffffffffffff, &(0x7f0000000580), 0x3c1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="93b20000000000000000010000000000000001410000001c001700020000000000006574683a73797a6b616c6c657231"], 0x38}}, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, r2, 0x20, 0x70bd2a, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x5156975f9c69b8f7}, 0x40084) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) dup(0xffffffffffffffff) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x135}) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, 0x0, 0x0, 0x0) 12:21:06 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffffbf00e931190000000000000680ffffffa9000000e100e2ff877700720030", 0x30, 0x1c0}]) 12:21:06 executing program 0: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:21:06 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e93119b926000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:21:06 executing program 1: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = gettid() readv(0xffffffffffffffff, &(0x7f0000000580), 0x3c1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="93b20000000000000000010000000000000001410000001c001700020000000000006574683a73797a6b616c6c657231"], 0x38}}, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, r2, 0x20, 0x70bd2a, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x5156975f9c69b8f7}, 0x40084) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) dup(0xffffffffffffffff) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x135}) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, 0x0, 0x0, 0x0) [ 1165.339227][T20885] tipc: Enabling of bearer rejected, failed to enable media 12:21:06 executing program 1: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = gettid() readv(0xffffffffffffffff, &(0x7f0000000580), 0x3c1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="93b20000000000000000010000000000000001410000001c001700020000000000006574683a73797a6b616c6c657231"], 0x38}}, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, r2, 0x20, 0x70bd2a, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x5156975f9c69b8f7}, 0x40084) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) dup(0xffffffffffffffff) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x135}) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, 0x0, 0x0, 0x0) [ 1165.398866][T20897] tipc: Enabling of bearer rejected, failed to enable media [ 1165.418470][T20891] loop3: p1 p2 p3 p4 [ 1165.422650][T20891] loop3: p1 start 10 is beyond EOD, truncated [ 1165.429057][T20891] loop3: p2 start 2537753 is beyond EOD, truncated [ 1165.435585][T20891] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1165.442370][T20891] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:21:06 executing program 5: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xffffffffffffffff, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:21:06 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffffbf00e931190000000000000680ffffffa9000000e100e2ff877700720030", 0x30, 0x1c0}]) 12:21:06 executing program 1: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = gettid() readv(0xffffffffffffffff, &(0x7f0000000580), 0x3c1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="93b20000000000000000010000000000000001410000001c001700020000000000006574683a73797a6b616c6c657231"], 0x38}}, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, r2, 0x20, 0x70bd2a, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x5156975f9c69b8f7}, 0x40084) r3 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) dup(0xffffffffffffffff) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x135}) ptrace$setopts(0x4206, r3, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r3, 0x0, 0x0) [ 1165.490768][T20900] tipc: Enabling of bearer rejected, failed to enable media 12:21:06 executing program 1: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = gettid() readv(0xffffffffffffffff, &(0x7f0000000580), 0x3c1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="93b20000000000000000010000000000000001410000001c001700020000000000006574683a73797a6b616c6c657231"], 0x38}}, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, r2, 0x20, 0x70bd2a, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x5156975f9c69b8f7}, 0x40084) r3 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) dup(0xffffffffffffffff) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x135}) ptrace$setopts(0x4206, r3, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r3, 0x0, 0x0) [ 1165.546588][T20909] tipc: Enabling of bearer rejected, failed to enable media [ 1165.576639][T20891] loop3: p1 p2 p3 p4 [ 1165.580917][T20891] loop3: p1 start 10 is beyond EOD, truncated [ 1165.583664][T20914] tipc: Enabling of bearer rejected, failed to enable media 12:21:06 executing program 1: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = gettid() readv(0xffffffffffffffff, &(0x7f0000000580), 0x3c1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="93b20000000000000000010000000000000001410000001c001700020000000000006574683a73797a6b616c6c657231"], 0x38}}, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, r2, 0x20, 0x70bd2a, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x5156975f9c69b8f7}, 0x40084) r3 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) dup(0xffffffffffffffff) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x135}) ptrace$setopts(0x4206, r3, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r3, 0x0, 0x0) [ 1165.587223][T20891] loop3: p2 start 2537753 is beyond EOD, truncated [ 1165.603418][T20891] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1165.610789][T20891] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1165.623052][T20916] tipc: Enabling of bearer rejected, failed to enable media [ 1165.671822][ T153] loop3: p1 p2 p3 p4 [ 1165.675886][ T153] loop3: p1 start 10 is beyond EOD, truncated [ 1165.682453][ T153] loop3: p2 start 2537753 is beyond EOD, truncated [ 1165.689246][ T153] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1165.695990][ T153] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:21:09 executing program 2: r0 = gettid() sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x135}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:21:09 executing program 1: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = gettid() readv(0xffffffffffffffff, &(0x7f0000000580), 0x3c1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="93b20000000000000000010000000000000001410000001c001700020000000000006574683a73797a6b616c6c657231"], 0x38}}, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) dup(0xffffffffffffffff) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x135}) ptrace$setopts(0x4206, r3, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r3, 0x0, 0x0) 12:21:09 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffffbf00e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff0000", 0x38, 0x1c0}]) 12:21:09 executing program 0: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:21:09 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e93119003f000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:21:09 executing program 1: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = gettid() readv(0xffffffffffffffff, &(0x7f0000000580), 0x3c1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="93b20000000000000000010000000000000001410000001c001700020000000000006574683a73797a6b616c6c657231"], 0x38}}, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) dup(0xffffffffffffffff) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x135}) ptrace$setopts(0x4206, r3, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r3, 0x0, 0x0) 12:21:09 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffffbf00e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff0000", 0x38, 0x1c0}]) [ 1168.391703][T20924] tipc: Enabling of bearer rejected, failed to enable media [ 1168.456196][T20937] tipc: Enabling of bearer rejected, failed to enable media 12:21:09 executing program 5: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xffffffffffffffff, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:21:09 executing program 1: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = gettid() readv(0xffffffffffffffff, &(0x7f0000000580), 0x3c1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="93b20000000000000000010000000000000001410000001c001700020000000000006574683a73797a6b616c6c657231"], 0x38}}, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) dup(0xffffffffffffffff) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x135}) ptrace$setopts(0x4206, r3, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r3, 0x0, 0x0) 12:21:09 executing program 1: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = gettid() readv(0xffffffffffffffff, &(0x7f0000000580), 0x3c1) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, r1, 0x20, 0x70bd2a, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x5156975f9c69b8f7}, 0x40084) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) dup(0xffffffffffffffff) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x135}) ptrace$setopts(0x4206, r2, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r2, 0x0, 0x0) [ 1168.548996][T20942] tipc: Enabling of bearer rejected, failed to enable media 12:21:09 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffffbf00e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff0000", 0x38, 0x1c0}]) [ 1168.631085][T20929] loop3: p1 p2 p3 p4 [ 1168.635332][T20929] loop3: p1 start 10 is beyond EOD, truncated [ 1168.642063][T20929] loop3: p2 start 4128793 is beyond EOD, truncated [ 1168.648930][T20929] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1168.656543][T20929] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:21:09 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffffbf00e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff000000000080", 0x3c, 0x1c0}]) 12:21:12 executing program 2: r0 = gettid() sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x135}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:21:12 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e931190040000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:21:12 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffffbf00e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff000000000080", 0x3c, 0x1c0}]) 12:21:12 executing program 0: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xffffffffffffffff, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:21:12 executing program 0: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xffffffffffffffff, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:21:12 executing program 2: r0 = gettid() sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x135}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:21:12 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffffbf00e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff000000000080", 0x3c, 0x1c0}]) 12:21:12 executing program 5: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:21:12 executing program 1: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = gettid() readv(0xffffffffffffffff, &(0x7f0000000580), 0x3c1) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, r1, 0x20, 0x70bd2a, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x5156975f9c69b8f7}, 0x40084) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) dup(0xffffffffffffffff) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x135}) ptrace$setopts(0x4206, r2, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r2, 0x0, 0x0) [ 1171.572994][T20959] loop3: p1 p2 p3 p4 [ 1171.580425][T20959] loop3: p1 start 10 is beyond EOD, truncated [ 1171.586593][T20959] loop3: p2 start 4194329 is beyond EOD, truncated [ 1171.594229][T20959] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1171.601431][T20959] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:21:12 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffffbf00e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da", 0x3e, 0x1c0}]) 12:21:12 executing program 1: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = gettid() readv(0xffffffffffffffff, &(0x7f0000000580), 0x3c1) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, r1, 0x20, 0x70bd2a, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x5156975f9c69b8f7}, 0x40084) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) dup(0xffffffffffffffff) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x135}) ptrace$setopts(0x4206, r2, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r2, 0x0, 0x0) 12:21:12 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffffbf00e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da", 0x3e, 0x1c0}]) [ 1171.794878][T20959] loop3: p1 p2 p3 p4 [ 1171.799031][T20959] loop3: p1 start 10 is beyond EOD, truncated [ 1171.806356][T20959] loop3: p2 start 4194329 is beyond EOD, truncated [ 1171.813036][T20959] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1171.819921][T20959] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:21:12 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e931190048000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:21:12 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffffbf00e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da", 0x3e, 0x1c0}]) [ 1172.117889][T20998] loop3: p1 p2 p3 p4 [ 1172.122074][T20998] loop3: p1 start 10 is beyond EOD, truncated [ 1172.128634][T20998] loop3: p2 start 4718617 is beyond EOD, truncated [ 1172.135208][T20998] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1172.142227][T20998] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:21:12 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffffbf00e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55", 0x3f, 0x1c0}]) [ 1172.287824][T20998] loop3: p1 p2 p3 p4 [ 1172.292001][T20998] loop3: p1 start 10 is beyond EOD, truncated [ 1172.298714][T20998] loop3: p2 start 4718617 is beyond EOD, truncated [ 1172.305300][T20998] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1172.312240][T20998] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:21:13 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e93119004c000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1172.387809][ T153] loop3: p1 p2 p3 p4 [ 1172.391995][ T153] loop3: p1 start 10 is beyond EOD, truncated [ 1172.399081][ T153] loop3: p2 start 4718617 is beyond EOD, truncated [ 1172.405764][ T153] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1172.412529][ T153] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1172.529829][T21008] loop3: p1 p2 p3 p4 [ 1172.534147][T21008] loop3: p1 start 10 is beyond EOD, truncated [ 1172.540698][T21008] loop3: p2 start 4980761 is beyond EOD, truncated [ 1172.547507][T21008] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1172.554363][T21008] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:21:15 executing program 0: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xffffffffffffffff, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:21:15 executing program 2: r0 = gettid() sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x135}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:21:15 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffffbf00e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55", 0x3f, 0x1c0}]) 12:21:15 executing program 5: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:21:15 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e931190060000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:21:15 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffffbf00e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55", 0x3f, 0x1c0}]) 12:21:15 executing program 1: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = gettid() readv(0xffffffffffffffff, &(0x7f0000000580), 0x3c1) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="93b20000000000000000010000000000000001410000001c001700020000000000006574683a73797a6b616c6c657231"], 0x38}}, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x0, 0x20, 0x70bd2a, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x5156975f9c69b8f7}, 0x40084) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) dup(0xffffffffffffffff) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x135}) ptrace$setopts(0x4206, r2, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r2, 0x0, 0x0) 12:21:15 executing program 2: r0 = gettid() sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x135}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:21:15 executing program 1: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = gettid() readv(0xffffffffffffffff, &(0x7f0000000580), 0x3c1) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="93b20000000000000000010000000000000001410000001c001700020000000000006574683a73797a6b616c6c657231"], 0x38}}, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x0, 0x20, 0x70bd2a, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x5156975f9c69b8f7}, 0x40084) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) dup(0xffffffffffffffff) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x135}) ptrace$setopts(0x4206, r2, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r2, 0x0, 0x0) [ 1174.783262][T21024] loop3: p1 p2 p3 p4 [ 1174.787503][T21024] loop3: p1 start 10 is beyond EOD, truncated [ 1174.798945][T21024] loop3: p2 start 6291481 is beyond EOD, truncated [ 1174.806675][T21024] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1174.814047][T21024] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:21:15 executing program 2: r0 = gettid() sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x135}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:21:15 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e931190068000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:21:15 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffffbf00e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40}]) [ 1174.968794][T21046] loop3: p1 p2 p3 p4 [ 1174.972863][T21046] loop3: p1 start 10 is beyond EOD, truncated [ 1174.979494][T21046] loop3: p2 start 6815769 is beyond EOD, truncated [ 1174.986015][T21046] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1174.993230][T21046] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1175.127887][T21046] loop3: p1 p2 p3 p4 [ 1175.132153][T21046] loop3: p1 start 10 is beyond EOD, truncated [ 1175.138481][T21046] loop3: p2 start 6815769 is beyond EOD, truncated [ 1175.144987][T21046] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1175.151787][T21046] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1175.159921][ T153] loop3: p1 p2 p3 p4 [ 1175.164164][ T153] loop3: p1 start 10 is beyond EOD, truncated [ 1175.170799][ T153] loop3: p2 start 6815769 is beyond EOD, truncated [ 1175.177562][ T153] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1175.184305][ T153] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:21:18 executing program 0: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:21:18 executing program 2: r0 = gettid() sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x135}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:21:18 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffffbf00e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40}]) 12:21:18 executing program 5: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:21:18 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e93119006c000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:21:18 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffffbf00e931190000000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40}]) 12:21:18 executing program 2: r0 = gettid() sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x135}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:21:18 executing program 5: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, 0x0) ptrace$cont(0x9, r1, 0x0, 0x0) [ 1177.820062][T21068] loop3: p1 p2 p3 p4 [ 1177.824255][T21068] loop3: p1 start 10 is beyond EOD, truncated [ 1177.831156][T21068] loop3: p2 start 7077913 is beyond EOD, truncated [ 1177.838122][T21068] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1177.846385][T21068] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:21:18 executing program 1: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = gettid() readv(0xffffffffffffffff, &(0x7f0000000580), 0x3c1) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="93b20000000000000000010000000000000001410000001c001700020000000000006574683a73797a6b616c6c657231"], 0x38}}, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x0, 0x20, 0x70bd2a, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x5156975f9c69b8f7}, 0x40084) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) dup(0xffffffffffffffff) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x135}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:21:18 executing program 2: r0 = gettid() sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x135}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:21:18 executing program 2: r0 = gettid() sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r2 = socket$packet(0x11, 0x0, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x135}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:21:18 executing program 4: [ 1178.041097][ T153] loop3: p1 p2 p3 p4 [ 1178.045303][ T153] loop3: p1 start 10 is beyond EOD, truncated [ 1178.052101][ T153] loop3: p2 start 7077913 is beyond EOD, truncated [ 1178.059181][ T153] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1178.066024][ T153] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1178.074614][T21068] loop3: p1 p2 p3 p4 [ 1178.079082][T21068] loop3: p1 start 10 is beyond EOD, truncated [ 1178.085129][T21068] loop3: p2 start 7077913 is beyond EOD, truncated [ 1178.092079][T21068] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1178.099138][T21068] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:21:21 executing program 0: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:21:21 executing program 4: unshare(0x40000000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCCONNECT(r1, 0x4004743a, 0x0) 12:21:21 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e931190074000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:21:21 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x8) setsockopt$inet6_int(r0, 0x29, 0x18, 0x0, 0x0) 12:21:21 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000480)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x0) 12:21:21 executing program 4: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() syz_open_pts(0xffffffffffffffff, 0x220201) ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x3) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x450, 0x268, 0x4c, 0x274, 0x0, 0x0, 0x380, 0x318, 0x318, 0x380, 0x318, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x7], 0x0, 0x248, 0x268, 0x0, {}, [@common=@inet=@hashlimit3={{0x158, 'hashlimit\x00'}, {'lo\x00', {0x0, 0x2, 0x0, 0x0, 0x7fffffff, 0x25e, 0x80}}}, @common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x3ff}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r2, r3, 0x0) [ 1180.769481][T21096] loop3: p1 p2 p3 p4 [ 1180.773595][T21096] loop3: p1 start 10 is beyond EOD, truncated [ 1180.782690][T21096] loop3: p2 start 7602201 is beyond EOD, truncated [ 1180.789604][T21096] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1180.796894][T21096] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:21:21 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e93119007a000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:21:21 executing program 5: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, 0x0) ptrace$cont(0x9, r1, 0x0, 0x0) [ 1180.824037][T21113] xt_hashlimit: max too large, truncated to 1048576 [ 1180.909412][T21120] loop3: p1 p2 p3 p4 [ 1180.913533][T21120] loop3: p1 start 10 is beyond EOD, truncated [ 1180.920065][T21120] loop3: p2 start 7995417 is beyond EOD, truncated [ 1180.926832][T21120] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1180.933571][T21120] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1180.950310][ T153] loop3: p1 p2 p3 p4 12:21:21 executing program 1: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) r0 = gettid() sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="93b20000000000000000010000000000000001410000001c001700020000000000006574683a73797a6b616c6c657231"], 0x38}}, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x0, 0x20, 0x70bd2a, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x5156975f9c69b8f7}, 0x40084) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) dup(0xffffffffffffffff) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x135}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:21:21 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0xc, 0x121041) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x2, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) write$evdev(r0, &(0x7f0000000040), 0x373) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000100)=""/204) [ 1180.954383][ T153] loop3: p1 start 10 is beyond EOD, truncated [ 1180.960702][ T153] loop3: p2 start 7995417 is beyond EOD, truncated [ 1180.967244][ T153] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1180.974070][ T153] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:21:21 executing program 2: r0 = gettid() sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r2 = socket$packet(0x11, 0x0, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x135}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:21:21 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e931190480000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1181.121849][T21134] loop3: p1 p2 p3 p4 [ 1181.126031][T21134] loop3: p1 start 10 is beyond EOD, truncated [ 1181.132298][T21134] loop3: p2 start 8389657 is beyond EOD, truncated [ 1181.139001][T21134] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1181.145798][T21134] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:21:24 executing program 0: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:21:24 executing program 4: mknod(0x0, 0x0, 0x400) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, 0x0, &(0x7f0000000000)='cpuset\x00', 0x0, &(0x7f000000a000)) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{0x0, 0x0, 0x1}], 0x100488, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000400)=0x9) ioctl$NS_GET_NSTYPE(0xffffffffffffffff, 0xb703, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000040)={0x2, 0x400000000000003, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3}, @sadb_lifetime={0x4, 0x4}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}]}, 0x88}}, 0x0) fcntl$dupfd(r0, 0x406, r1) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0)='devlink\x00') 12:21:24 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e931190090000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:21:24 executing program 5: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, 0x0) ptrace$cont(0x9, r1, 0x0, 0x0) 12:21:24 executing program 4: getpgid(0x0) mknod(0x0, 0x0, 0x400) r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cpuset\x00', 0x0, &(0x7f000000a000)) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0xfffffffffffffe3a, 0x1}], 0x100488, 0x0) r1 = dup3(0xffffffffffffffff, r0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000440)='./file0\x00', 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000400)=0x9) ioctl$NS_GET_NSTYPE(0xffffffffffffffff, 0xb703, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000300)=ANY=[@ANYBLOB="02030000160000000000000000000000040003000000000000000000441f0000000000000000000000000000e6ee0000000005000600000000000a00008cf7117d6808a40000000000fe73000000000000002000000000000000000000000000000400040000000000000000000000000000000002000100000000000000000000000000050005efffffffd6657b134fb4b5c641ff090000cf0100000000000000ffffc9794148e983a10f93de9c16cb01c24ce22a413f6873667af12bdfcbcd09854454b7c141124323f8a90f75fcce269cacf1995273011f8888ee"], 0xb0}}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000040)={0x2, 0x400000000000003, 0x0, 0x0, 0x16, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_lifetime={0x4, 0x4}, @sadb_sa={0x2}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}]}, 0xb0}}, 0x0) r4 = fcntl$dupfd(r2, 0x406, 0xffffffffffffffff) r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, r5, 0x400, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0) [ 1183.866385][T21143] loop3: p1 p2 p3 p4 [ 1183.871101][T21143] loop3: p1 start 10 is beyond EOD, truncated [ 1183.877858][T21143] loop3: p2 start 9437209 is beyond EOD, truncated [ 1183.884425][T21143] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1183.891436][T21143] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:21:24 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e9311926b9000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:21:24 executing program 4: getpgid(0x0) mknod(0x0, 0x0, 0x400) r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cpuset\x00', 0x0, &(0x7f000000a000)) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0xfffffffffffffe3a, 0x1}], 0x100488, 0x0) r1 = dup3(0xffffffffffffffff, r0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000440)='./file0\x00', 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000400)=0x9) ioctl$NS_GET_NSTYPE(0xffffffffffffffff, 0xb703, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000300)=ANY=[@ANYBLOB="02030000160000000000000000000000040003000000000000000000441f0000000000000000000000000000e6ee0000000005000600000000000a00008cf7117d6808a40000000000fe73000000000000002000000000000000000000000000000400040000000000000000000000000000000002000100000000000000000000000000050005efffffffd6657b134fb4b5c641ff090000cf0100000000000000ffffc9794148e983a10f93de9c16cb01c24ce22a413f6873667af12bdfcbcd09854454b7c141124323f8a90f75fcce269cacf1995273011f8888ee"], 0xb0}}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000040)={0x2, 0x400000000000003, 0x0, 0x0, 0x16, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_lifetime={0x4, 0x4}, @sadb_sa={0x2}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}]}, 0xb0}}, 0x0) r4 = fcntl$dupfd(r2, 0x406, 0xffffffffffffffff) r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, r5, 0x400, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0) 12:21:24 executing program 1: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="93b20000000000000000010000000000000001410000001c001700020000000000006574683a73797a6b616c6c657231"], 0x38}}, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x0, 0x20, 0x70bd2a, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x5156975f9c69b8f7}, 0x40084) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) dup(0xffffffffffffffff) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x135}) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(0x0, 0x39) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 1183.999442][ T153] loop3: p1 p2 p3 p4 [ 1184.003577][ T153] loop3: p1 start 10 is beyond EOD, truncated [ 1184.009885][ T153] loop3: p2 start 12133913 is beyond EOD, truncated [ 1184.017426][ T153] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1184.028885][ T153] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1184.037364][T21163] loop3: p1 p2 p3 p4 [ 1184.041575][T21163] loop3: p1 start 10 is beyond EOD, truncated 12:21:24 executing program 2: r0 = gettid() sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r2 = socket$packet(0x11, 0x0, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x135}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:21:24 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000400)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000400000000000000000000008f80000030000003003000098020000000000000000000000000000000000009802000098020000980700009802000098020000030080000000000000000000ffffffffe00000010000000000000000e4000000010000000000bd00000000007465616d5f736c6176655f310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001080200000000000000000000000000000000000000f54f01686173686c696d6974000000000000000000000000008800000000000002726f736530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007c930000000040000000000000000000000000000000000000000000000000000000000000fb000000000000ecff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffffffffffff0000000000000000000000000300000007000000000000000000000000000000480043"], 0x1) 12:21:24 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x80009, 0x1fc}) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 12:21:24 executing program 4: open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0xa0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000380)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x0, 0x0}, 0x10) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfed4, 0x20c49a, 0x0, 0x27) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = fcntl$dupfd(r2, 0x0, r3) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5}]}}}]}, 0x3c}}, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, &(0x7f0000000080), &(0x7f0000000040)=0x1f) [ 1184.051299][T21163] loop3: p2 start 12133913 is beyond EOD, truncated [ 1184.063700][T21163] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1184.071325][T21163] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1184.178614][T21163] loop3: p1 p2 p3 p4 [ 1184.182728][T21163] loop3: p1 start 10 is beyond EOD, truncated [ 1184.189628][T21163] loop3: p2 start 12133913 is beyond EOD, truncated [ 1184.196343][T21163] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1184.203139][T21163] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1184.246797][ T153] loop3: p1 p2 p3 p4 [ 1184.250962][ T153] loop3: p1 start 10 is beyond EOD, truncated [ 1184.257053][ T153] loop3: p2 start 12133913 is beyond EOD, truncated [ 1184.263629][ T153] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1184.270386][ T153] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1184.273549][T21183] xt_CT: netfilter: NOTRACK target is deprecated, use CT instead or upgrade iptables 12:21:27 executing program 0: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, 0x0) ptrace$cont(0x9, r1, 0x0, 0x0) 12:21:27 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e9311904f5000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:21:27 executing program 4: prctl$PR_SET_DUMPABLE(0x4, 0x0) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(&(0x7f00000000c0)='systemem0md5sum$\x00', 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x3c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') 12:21:27 executing program 5: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0xffffffffffffffff, r1, 0x0, 0x0) 12:21:27 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000480)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x7) 12:21:27 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x54, 0xf2, 0x22, 0x40, 0x10c4, 0x80f6, 0x38f2, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2c, 0x26, 0xa1}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, &(0x7f00000002c0)={0x0, 0x0, 0x2, "0bc1"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f0000000300)={0x0, 0x0, 0x2, "e336"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1186.901779][T21191] loop3: p1 p2 p3 p4 [ 1186.905973][T21191] loop3: p1 start 10 is beyond EOD, truncated [ 1186.913032][T21191] loop3: p2 start 16057369 is beyond EOD, truncated [ 1186.920601][T21191] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1186.927629][T21191] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:21:27 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e931190fff000000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:21:27 executing program 1: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="93b20000000000000000010000000000000001410000001c001700020000000000006574683a73797a6b616c6c657231"], 0x38}}, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x0, 0x20, 0x70bd2a, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x5156975f9c69b8f7}, 0x40084) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) dup(0xffffffffffffffff) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x135}) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(0x0, 0x39) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 1186.986212][T21191] loop3: p1 p2 p3 p4 [ 1186.990359][T21191] loop3: p1 start 10 is beyond EOD, truncated [ 1186.996751][T21191] loop3: p2 start 16057369 is beyond EOD, truncated [ 1187.003332][T21191] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1187.010121][T21191] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:21:27 executing program 2: r0 = gettid() sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socket$packet(0x11, 0x2, 0x300) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x135}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:21:27 executing program 1: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="93b20000000000000000010000000000000001410000001c001700020000000000006574683a73797a6b616c6c657231"], 0x38}}, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x0, 0x20, 0x70bd2a, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x5156975f9c69b8f7}, 0x40084) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) dup(0xffffffffffffffff) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x135}) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(0x0, 0x39) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 12:21:27 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e931190000080000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1187.166311][T21211] loop3: p1 p2 p3 p4 [ 1187.173450][T21211] loop3: p1 start 10 is beyond EOD, truncated [ 1187.180281][T21211] loop3: p2 start 16715545 is beyond EOD, truncated [ 1187.187430][T21211] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1187.194200][T21211] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1187.201487][ T8432] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 1187.326307][T21221] loop3: p1 p2 p3 p4 [ 1187.330498][T21221] loop3: p1 start 10 is beyond EOD, truncated [ 1187.336633][T21221] loop3: p2 start 134217753 is beyond EOD, truncated [ 1187.343429][T21221] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1187.350331][T21221] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1187.446138][T21221] loop3: p1 p2 p3 p4 [ 1187.450315][T21221] loop3: p1 start 10 is beyond EOD, truncated [ 1187.456606][T21221] loop3: p2 start 134217753 is beyond EOD, truncated [ 1187.463300][T21221] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1187.470115][T21221] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:21:28 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e931194000080000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1187.526589][ T153] loop3: p1 p2 p3 p4 [ 1187.530791][ T153] loop3: p1 start 10 is beyond EOD, truncated [ 1187.537181][ T153] loop3: p2 start 134217753 is beyond EOD, truncated [ 1187.543973][ T153] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1187.550819][ T153] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1187.605852][ T8432] usb 5-1: New USB device found, idVendor=10c4, idProduct=80f6, bcdDevice=38.f2 [ 1187.614943][ T8432] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1187.624073][ T8432] usb 5-1: config 0 descriptor?? [ 1187.638062][T21225] loop3: p1 p2 p3 p4 [ 1187.642150][T21225] loop3: p1 start 10 is beyond EOD, truncated [ 1187.648296][T21225] loop3: p2 start 134234137 is beyond EOD, truncated [ 1187.654970][T21225] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1187.661817][T21225] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:21:30 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e9311900000a0000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:21:30 executing program 0: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, 0x0) ptrace$cont(0x9, r1, 0x0, 0x0) 12:21:30 executing program 5: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0xffffffffffffffff, r1, 0x0, 0x0) 12:21:30 executing program 5: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0xffffffffffffffff, r1, 0x0, 0x0) 12:21:30 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x46d, 0xc294, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x4c, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x199}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x3b8, {0x9, 0x0, "ad067fd340187fcc9481ea4ed33a5668bfeeda20368ddf0252d582dcff7e0d6e"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) [ 1189.917528][T17861] usb 5-1: USB disconnect, device number 43 [ 1189.937689][T21233] loop3: p1 p2 p3 p4 [ 1189.943678][T21233] loop3: p1 start 10 is beyond EOD, truncated [ 1189.954982][T21233] loop3: p2 start 167772185 is beyond EOD, truncated [ 1189.962209][T21233] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1189.969563][T21233] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:21:30 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e93119ffff0f0000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:21:30 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e931190000200000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:21:30 executing program 2: r0 = gettid() sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socket$packet(0x11, 0x2, 0x300) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x135}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:21:30 executing program 1: r0 = gettid() sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="93b20000000000000000010000000000000001410000001c001700020000000000006574683a73797a6b616c6c657231"], 0x38}}, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x0, 0x20, 0x70bd2a, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x5156975f9c69b8f7}, 0x40084) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) dup(0xffffffffffffffff) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x135}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 1190.106325][T21250] loop3: p1 p2 p3 p4 [ 1190.110510][T21250] loop3: p1 start 10 is beyond EOD, truncated [ 1190.117171][T21250] loop3: p2 start 268435225 is beyond EOD, truncated [ 1190.123908][T21250] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1190.133703][T21250] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1190.226089][ T153] loop3: p1 p2 p3 p4 [ 1190.230145][ T153] loop3: p1 start 10 is beyond EOD, truncated [ 1190.236264][ T153] loop3: p2 start 536870937 is beyond EOD, truncated [ 1190.242999][ T153] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1190.249771][ T153] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1190.257933][T21254] loop3: p1 p2 p3 p4 [ 1190.262069][T21254] loop3: p1 start 10 is beyond EOD, truncated [ 1190.268391][T21254] loop3: p2 start 536870937 is beyond EOD, truncated [ 1190.275133][T21254] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1190.282000][T21254] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1190.345573][T17861] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 1190.368647][T21254] loop3: p1 p2 p3 p4 [ 1190.372838][T21254] loop3: p1 start 10 is beyond EOD, truncated [ 1190.379095][T21254] loop3: p2 start 536870937 is beyond EOD, truncated [ 1190.385979][T21254] loop3: p3 start 4293001441 is beyond EOD, truncated 12:21:31 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e931190000400000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1190.392793][T21254] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1190.478241][ T153] loop3: p1 p2 p3 p4 [ 1190.482432][ T153] loop3: p1 start 10 is beyond EOD, truncated [ 1190.488529][ T153] loop3: p2 start 536870937 is beyond EOD, truncated [ 1190.495185][ T153] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1190.501965][ T153] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:21:31 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e931190000900000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1190.586118][T21263] loop3: p1 p2 p3 p4 [ 1190.590327][T21263] loop3: p1 start 10 is beyond EOD, truncated [ 1190.596894][T21263] loop3: p2 start 1073741849 is beyond EOD, truncated [ 1190.603702][T21263] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1190.605586][T17861] usb 5-1: Using ep0 maxpacket: 8 [ 1190.611262][T21263] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1190.705902][T21266] loop3: p1 p2 p3 p4 [ 1190.710899][T21266] loop3: p1 start 10 is beyond EOD, truncated [ 1190.717476][T21266] loop3: p2 start 2415919129 is beyond EOD, truncated [ 1190.724322][T21266] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1190.731466][T21266] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1190.765587][T17861] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 76, using maximum allowed: 30 [ 1190.776458][T17861] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1190.788012][T17861] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1190.798214][T17861] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 76 [ 1190.811522][T17861] usb 5-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.00 [ 1190.820897][T17861] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1190.829856][T17861] usb 5-1: config 0 descriptor?? 12:21:31 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e931190000000100000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1190.875864][T21266] loop3: p1 p2 p3 p4 [ 1190.880008][T21266] loop3: p1 start 10 is beyond EOD, truncated [ 1190.886616][T21266] loop3: p2 start 2415919129 is beyond EOD, truncated [ 1190.893376][T21266] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1190.900289][T21266] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:21:31 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e931190000000200000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1191.055945][T21270] loop3: p1 p2 p3 p4 [ 1191.060105][T21270] loop3: p1 start 10 is beyond EOD, truncated [ 1191.066532][T21270] loop3: p2 start 25 is beyond EOD, truncated [ 1191.072621][T21270] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1191.079407][T21270] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1191.186245][T21273] loop3: p1 p2 p3 p4 [ 1191.190437][T21273] loop3: p1 start 10 is beyond EOD, truncated [ 1191.196793][T21273] loop3: p2 start 25 is beyond EOD, truncated [ 1191.202925][T21273] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1191.209886][T21273] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1191.286234][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1191.293406][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1191.300789][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1191.308113][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1191.315322][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1191.322679][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1191.330895][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1191.338254][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1191.347251][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1191.354477][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1191.362963][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1191.370833][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1191.378766][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1191.386642][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1191.393873][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1191.402602][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1191.410556][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1191.418417][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1191.426330][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1191.433436][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1191.441837][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1191.449849][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1191.457973][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1191.465083][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1191.473507][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1191.481719][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1191.489755][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1191.497676][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1191.504799][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1191.513467][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1191.521554][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1191.529429][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1191.537210][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1191.544316][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1191.552807][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1191.560780][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1191.568800][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1191.576674][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1191.583780][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1191.592256][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1191.600124][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1191.608036][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1191.615144][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1191.623689][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1191.631550][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1191.639423][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1191.647361][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1191.654469][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1191.663180][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1191.671080][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1191.679120][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1191.686974][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1191.694093][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1191.702572][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1191.710453][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1191.718277][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1191.726236][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1191.733344][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1191.741848][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1191.749639][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1191.757527][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1191.764653][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1191.773096][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1191.780993][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1191.788809][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1191.796796][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1191.803906][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1191.812288][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1191.820293][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1191.828223][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1191.835335][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1191.843774][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1191.851808][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1191.859713][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1191.867570][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1191.874687][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1191.883136][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1191.890951][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1191.898747][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1191.906747][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1191.913871][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1191.922315][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1191.930151][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1191.938079][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1191.945272][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1191.953761][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1191.964464][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1191.972288][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1191.980196][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1191.988073][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1191.995283][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1192.003842][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1192.012048][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1192.020049][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1192.027945][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1192.035061][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1192.043712][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1192.051620][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1192.059592][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1192.067434][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1192.074545][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1192.083136][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1192.091037][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1192.098927][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1192.106749][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1192.113938][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1192.122498][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1192.130662][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1192.138545][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1192.146467][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1192.153579][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1192.162546][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1192.170399][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1192.178323][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1192.186228][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1192.193331][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1192.201798][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1192.209678][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1192.217620][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1192.224733][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1192.233239][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1192.241357][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1192.249262][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1192.257075][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1192.264185][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1192.272714][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1192.280644][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1192.288574][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1192.296630][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1192.303738][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1192.312162][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1192.319983][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1192.327977][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1192.335086][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1192.343519][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1192.351432][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1192.359204][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1192.367147][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1192.374249][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1192.382682][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1192.390560][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1192.398443][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1192.406460][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1192.413561][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1192.422005][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1192.429817][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1192.437583][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1192.444684][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1192.453147][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1192.461103][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1192.468901][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1192.476751][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1192.483862][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1192.492390][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1192.500192][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1192.508338][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1192.516441][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1192.523673][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1192.532125][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1192.540065][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1192.548056][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1192.555160][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1192.563557][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1192.571491][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1192.579294][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1192.587102][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1192.594199][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1192.602613][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1192.610460][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1192.618253][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1192.626265][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1192.633377][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1192.641877][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1192.649917][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1192.657821][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1192.664931][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1192.673393][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1192.681431][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1192.689275][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1192.697148][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1192.704262][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1192.712624][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1192.720511][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1192.728455][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1192.736450][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1192.743810][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1192.752421][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1192.760395][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1192.768302][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1192.776512][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1192.783618][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1192.792327][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1192.800137][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1192.808059][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1192.815165][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1192.823588][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1192.831413][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1192.839252][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1192.847240][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1192.854341][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1192.862683][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1192.870547][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1192.878388][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1192.886194][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 12:21:33 executing program 0: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, 0x0) ptrace$cont(0x9, r1, 0x0, 0x0) 12:21:33 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e931190000040200000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1192.893315][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1192.902002][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1192.909845][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1192.917668][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1192.924768][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 12:21:33 executing program 5: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, 0x0, 0x0, 0x0) 12:21:33 executing program 4: r0 = syz_usb_connect(0x0, 0x1ca, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd7, 0xd5, 0x96, 0x8, 0x4fc, 0x504a, 0xe204, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe1, 0x3e, 0x76}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000040)={0x84, &(0x7f0000001580)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) [ 1192.939667][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1192.950418][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1192.958424][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1192.966483][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1192.973600][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1192.989581][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1192.994544][T21280] loop3: p1 p2 p3 p4 [ 1193.001162][T21280] loop3: p1 start 10 is beyond EOD, truncated [ 1193.002740][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1193.011133][T21280] loop3: p2 start 67108889 is beyond EOD, truncated [ 1193.017082][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1193.021618][T21280] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1193.029296][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1193.035179][T21280] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1193.042311][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1193.056720][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1193.063874][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1193.071098][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1193.078236][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1193.085382][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1193.092482][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1193.099624][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1193.106763][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1193.113859][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1193.120980][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1193.128121][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1193.135217][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1193.142353][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1193.149502][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1193.156633][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1193.163737][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1193.170867][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1193.178022][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1193.185126][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 12:21:33 executing program 1: r0 = gettid() sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x0, 0x20, 0x70bd2a, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x5156975f9c69b8f7}, 0x40084) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) dup(0xffffffffffffffff) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x135}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:21:33 executing program 2: r0 = gettid() sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socket$packet(0x11, 0x2, 0x300) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x135}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 1193.192270][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1193.203750][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1193.211071][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1193.219460][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1193.226711][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1193.233820][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1193.241163][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1193.248322][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1193.255827][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1193.262924][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1193.270142][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1193.277273][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1193.284367][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1193.291492][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1193.298699][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1193.305872][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1193.312980][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1193.320106][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1193.327259][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1193.334362][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1193.341507][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1193.348650][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1193.355829][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1193.362936][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1193.370065][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1193.377235][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1193.384347][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1193.384967][T21280] loop3: p1 p2 p3 p4 [ 1193.391489][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1193.400879][T21280] loop3: p1 start 10 is beyond EOD, truncated [ 1193.402588][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1193.402600][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1193.411021][T21280] loop3: p2 start 67108889 is beyond EOD, truncated [ 1193.415859][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1193.424407][T21280] loop3: p3 start 4293001441 is beyond EOD, truncated 12:21:34 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e931190000000300000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1193.430629][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1193.437895][T21280] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1193.443342][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1193.443356][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1193.443372][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1193.479103][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1193.486234][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1193.493342][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1193.500481][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1193.507742][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1193.514845][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1193.522033][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1193.529249][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1193.536394][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1193.543500][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1193.551497][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1193.558648][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1193.565769][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1193.572877][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1193.580005][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1193.587261][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1193.594369][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1193.601485][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1193.608646][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1193.615783][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1193.622894][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1193.630019][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1193.637161][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1193.644274][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1193.651410][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1193.658553][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1193.665936][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1193.673057][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1193.680196][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1193.687331][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1193.694426][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1193.701546][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1193.708681][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1193.715808][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1193.723224][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1193.730429][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1193.737648][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1193.744778][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1193.751923][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1193.759061][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1193.766192][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1193.773292][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1193.780431][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1193.787571][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1193.794666][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1193.801786][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1193.808929][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1193.816051][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1193.823153][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1193.830283][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1193.837419][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1193.844512][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1193.851645][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1193.858813][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1193.866109][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1193.873205][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1193.880330][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1193.887468][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1193.894556][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1193.901682][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1193.908819][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1193.915964][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1193.923083][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1193.930208][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1193.937336][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1193.944426][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1193.951540][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1193.958696][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1193.965828][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1193.973065][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1193.980193][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1193.987410][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1193.994551][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1194.001721][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1194.008888][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1194.016044][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1194.023166][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1194.032290][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1194.039488][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1194.046638][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1194.053741][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1194.060879][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1194.068051][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1194.075443][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1194.082550][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1194.089711][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1194.096855][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1194.103956][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1194.111101][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1194.118260][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1194.125398][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1194.132507][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1194.139657][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1194.146787][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1194.153896][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1194.161029][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1194.168173][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1194.175304][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1194.182410][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1194.189656][T17861] logitech 0003:046D:C294.0008: unknown main item tag 0x0 [ 1194.189885][T21300] loop3: p1 p2 p3 p4 [ 1194.201117][T17861] logitech 0003:046D:C294.0008: hidraw0: USB HID v0.00 Device [HID 046d:c294] on usb-dummy_hcd.4-1/input0 [ 1194.208971][T21300] loop3: p1 start 10 is beyond EOD, truncated [ 1194.218519][T17861] logitech 0003:046D:C294.0008: no inputs found [ 1194.221027][T21300] loop3: p2 start 25 is beyond EOD, truncated [ 1194.227555][T17861] usb 5-1: USB disconnect, device number 44 [ 1194.232208][T21300] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1194.243566][T21300] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1194.306181][T21300] loop3: p1 p2 p3 p4 [ 1194.310339][T21300] loop3: p1 start 10 is beyond EOD, truncated [ 1194.316795][T21300] loop3: p2 start 25 is beyond EOD, truncated [ 1194.323402][T21300] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1194.330557][T21300] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:21:35 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e931190000000400000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1194.375833][ T153] loop3: p1 p2 p3 p4 [ 1194.380666][ T153] loop3: p1 start 10 is beyond EOD, truncated [ 1194.386963][ T153] loop3: p2 start 25 is beyond EOD, truncated [ 1194.393125][ T153] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1194.399939][ T153] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1194.525648][T21307] loop3: p1 p2 p3 p4 [ 1194.529883][T21307] loop3: p1 start 10 is beyond EOD, truncated [ 1194.536435][T21307] loop3: p2 start 25 is beyond EOD, truncated [ 1194.542540][T21307] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1194.549696][T21307] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:21:35 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e931190000000500000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1194.585223][T17861] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 1194.665929][T21310] loop3: p1 p2 p3 p4 [ 1194.670116][T21310] loop3: p1 start 10 is beyond EOD, truncated [ 1194.676689][T21310] loop3: p2 start 25 is beyond EOD, truncated [ 1194.682798][T21310] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1194.690002][T21310] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:21:35 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e931190000000600000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1194.797987][T21313] loop3: p1 p2 p3 p4 [ 1194.802181][T21313] loop3: p1 start 10 is beyond EOD, truncated [ 1194.808711][T21313] loop3: p2 start 25 is beyond EOD, truncated [ 1194.814777][T21313] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1194.821932][T21313] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1194.825201][T17861] usb 5-1: Using ep0 maxpacket: 8 [ 1194.935694][T21313] loop3: p1 p2 p3 p4 [ 1194.940832][T21313] loop3: p1 start 10 is beyond EOD, truncated [ 1194.947622][T17861] usb 5-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=e2.04 [ 1194.956767][T21313] loop3: p2 start 25 is beyond EOD, truncated [ 1194.962819][T21313] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1194.970187][T17861] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1194.978789][T21313] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:21:35 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e931190000040600000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1194.986374][T17861] usb 5-1: config 0 descriptor?? [ 1194.995613][ T153] loop3: p1 p2 p3 p4 [ 1195.001358][ T153] loop3: p1 start 10 is beyond EOD, truncated [ 1195.007679][ T153] loop3: p2 start 25 is beyond EOD, truncated [ 1195.013902][ T153] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1195.020892][ T153] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1195.145797][T21317] loop3: p1 p2 p3 p4 [ 1195.149967][T21317] loop3: p1 start 10 is beyond EOD, truncated [ 1195.156096][T21317] loop3: p2 start 67108889 is beyond EOD, truncated [ 1195.162825][T21317] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1195.169605][T21317] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:21:36 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e931190000000700000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1195.255874][T21317] loop3: p1 p2 p3 p4 [ 1195.260077][T21317] loop3: p1 start 10 is beyond EOD, truncated [ 1195.266271][T21317] loop3: p2 start 67108889 is beyond EOD, truncated [ 1195.273319][T21317] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1195.280161][T21317] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1195.446100][T21321] loop3: p1 p2 p3 p4 [ 1195.450262][T21321] loop3: p1 start 10 is beyond EOD, truncated [ 1195.456849][T21321] loop3: p2 start 25 is beyond EOD, truncated [ 1195.462951][T21321] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1195.470112][T21321] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:21:36 executing program 0: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0xffffffffffffffff, r1, 0x0, 0x0) 12:21:36 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e931190000000800000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:21:36 executing program 5: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, 0x0, 0x0, 0x0) [ 1196.048702][T21330] loop3: p1 p2 p3 p4 [ 1196.052885][T21330] loop3: p1 start 10 is beyond EOD, truncated [ 1196.059950][T21330] loop3: p2 start 25 is beyond EOD, truncated [ 1196.066232][T21330] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1196.073045][T21330] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:21:37 executing program 4: r0 = syz_usb_connect(0x0, 0x1ca, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd7, 0xd5, 0x96, 0x8, 0x4fc, 0x504a, 0xe204, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe1, 0x3e, 0x76}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000040)={0x84, &(0x7f0000001580)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) 12:21:37 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e931190000000900000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:21:37 executing program 1: r0 = gettid() sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x0, 0x20, 0x70bd2a, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x5156975f9c69b8f7}, 0x40084) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) dup(0xffffffffffffffff) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x135}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:21:37 executing program 2: r0 = gettid() sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x135}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 1196.930820][ T8432] usb 5-1: USB disconnect, device number 45 12:21:37 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e931190000000a00000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1196.995504][T21348] loop3: p1 p2 p3 p4 [ 1196.999666][T21348] loop3: p1 start 10 is beyond EOD, truncated [ 1197.007179][T21348] loop3: p2 start 25 is beyond EOD, truncated [ 1197.013281][T21348] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1197.020256][T21348] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:21:37 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e931190000000b00000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1197.105445][T21356] loop3: p1 p2 p3 p4 [ 1197.109601][T21356] loop3: p1 start 10 is beyond EOD, truncated [ 1197.116198][T21356] loop3: p2 start 25 is beyond EOD, truncated [ 1197.122281][T21356] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1197.129146][T21356] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1197.225503][T21359] loop3: p1 p2 p3 p4 [ 1197.229684][T21359] loop3: p1 start 10 is beyond EOD, truncated [ 1197.235795][T21359] loop3: p2 start 25 is beyond EOD, truncated [ 1197.241925][T21359] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1197.248716][T21359] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:21:38 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e931190000000c00000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1197.345024][ T8432] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 1197.351613][T21359] loop3: p1 p2 p3 p4 [ 1197.357353][T21359] loop3: p1 start 10 is beyond EOD, truncated [ 1197.363424][T21359] loop3: p2 start 25 is beyond EOD, truncated [ 1197.370113][T21359] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1197.377124][T21359] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:21:38 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e931190000000d00000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1197.475389][T21363] loop3: p1 p2 p3 p4 [ 1197.479626][T21363] loop3: p1 start 10 is beyond EOD, truncated [ 1197.486169][T21363] loop3: p2 start 25 is beyond EOD, truncated [ 1197.492551][T21363] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1197.500121][T21363] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1197.595128][ T8432] usb 5-1: Using ep0 maxpacket: 8 [ 1197.601030][T21366] loop3: p1 p2 p3 p4 [ 1197.605383][T21366] loop3: p1 start 10 is beyond EOD, truncated [ 1197.611526][T21366] loop3: p2 start 25 is beyond EOD, truncated [ 1197.617902][T21366] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1197.624696][T21366] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1197.636237][ T153] loop3: p1 p2 p3 p4 12:21:38 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e931190000000e00000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1197.640319][ T153] loop3: p1 start 10 is beyond EOD, truncated [ 1197.647002][ T153] loop3: p2 start 25 is beyond EOD, truncated [ 1197.653058][ T153] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1197.660320][ T153] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1197.715168][ T8432] usb 5-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=e2.04 [ 1197.724375][ T8432] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1197.736184][ T8432] usb 5-1: config 0 descriptor?? [ 1197.785708][T21369] loop3: p1 p2 p3 p4 [ 1197.789927][T21369] loop3: p1 start 10 is beyond EOD, truncated [ 1197.796227][T21369] loop3: p2 start 25 is beyond EOD, truncated [ 1197.802386][T21369] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1197.809348][T21369] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:21:39 executing program 0: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0xffffffffffffffff, r1, 0x0, 0x0) 12:21:39 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e931190000001000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:21:39 executing program 5: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, 0x0, 0x0, 0x0) [ 1199.072019][T21374] loop3: p1 p2 p3 p4 [ 1199.078399][T21374] loop3: p1 start 10 is beyond EOD, truncated [ 1199.084586][T21374] loop3: p2 start 25 is beyond EOD, truncated [ 1199.090884][T21374] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1199.097736][T21374] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:21:40 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x72, 0x19, 0xa9, 0x8, 0x471, 0x302, 0x355e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa8, 0x44, 0xed}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001800)={0x2c, &(0x7f0000001600)={0x0, 0x0, 0x1, "b6"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 12:21:40 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e931190000001100000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:21:40 executing program 1: r0 = gettid() sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x0, 0x20, 0x70bd2a, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x5156975f9c69b8f7}, 0x40084) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) dup(0xffffffffffffffff) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x135}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:21:40 executing program 2: r0 = gettid() sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x135}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 1199.947437][T17861] usb 5-1: USB disconnect, device number 46 [ 1200.009782][T21391] loop3: p1 p2 p3 p4 [ 1200.013980][T21391] loop3: p1 start 10 is beyond EOD, truncated [ 1200.022437][T21391] loop3: p2 start 25 is beyond EOD, truncated [ 1200.029189][T21391] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1200.036342][T21391] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1200.047859][ T153] loop3: p1 p2 p3 p4 [ 1200.051962][ T153] loop3: p1 start 10 is beyond EOD, truncated 12:21:40 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e931190000001200000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1200.058543][ T153] loop3: p2 start 25 is beyond EOD, truncated [ 1200.064592][ T153] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1200.071933][ T153] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:21:40 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e931190000001300000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1200.165335][T21403] loop3: p1 p2 p3 p4 [ 1200.169546][T21403] loop3: p1 start 10 is beyond EOD, truncated [ 1200.175841][T21403] loop3: p2 start 25 is beyond EOD, truncated [ 1200.181906][T21403] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1200.188675][T21403] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1200.285645][T21406] loop3: p1 p2 p3 p4 [ 1200.289812][T21406] loop3: p1 start 10 is beyond EOD, truncated [ 1200.295898][T21406] loop3: p2 start 25 is beyond EOD, truncated [ 1200.301968][T21406] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1200.308732][T21406] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1200.344774][T17861] usb 5-1: new high-speed USB device number 47 using dummy_hcd 12:21:41 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e931190000001f00000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1200.395127][T21406] loop3: p1 p2 p3 p4 [ 1200.399310][T21406] loop3: p1 start 10 is beyond EOD, truncated [ 1200.406338][T21406] loop3: p2 start 25 is beyond EOD, truncated [ 1200.412440][T21406] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1200.419866][T21406] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:21:41 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e931190000002000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1200.555146][T21410] loop3: p1 p2 p3 p4 [ 1200.559313][T21410] loop3: p1 start 10 is beyond EOD, truncated [ 1200.565659][T21410] loop3: p2 start 25 is beyond EOD, truncated [ 1200.571968][T21410] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1200.578771][T21410] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1200.594739][T17861] usb 5-1: Using ep0 maxpacket: 8 [ 1200.665564][T21413] loop3: p1 p2 p3 p4 [ 1200.669912][T21413] loop3: p1 start 10 is beyond EOD, truncated [ 1200.676164][T21413] loop3: p2 start 25 is beyond EOD, truncated [ 1200.682275][T21413] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1200.689047][T21413] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1200.724816][T17861] usb 5-1: New USB device found, idVendor=0471, idProduct=0302, bcdDevice=35.5e [ 1200.733882][T17861] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1200.743256][T17861] usb 5-1: config 0 descriptor?? 12:21:41 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e931190000002200000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1200.775849][T21413] loop3: p1 p2 p3 p4 [ 1200.780038][T21413] loop3: p1 start 10 is beyond EOD, truncated [ 1200.786449][T21413] loop3: p2 start 25 is beyond EOD, truncated [ 1200.792548][T21413] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1200.799506][T21413] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1200.808377][ T153] loop3: p1 p2 p3 p4 [ 1200.812510][ T153] loop3: p1 start 10 is beyond EOD, truncated [ 1200.818825][ T153] loop3: p2 start 25 is beyond EOD, truncated [ 1200.825142][ T153] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1200.831901][ T153] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1200.925772][ T363] __loop_clr_fd: partition scan of loop3 failed (rc=-16) [ 1200.985520][T21417] loop3: p1 p2 p3 p4 [ 1200.989671][T21417] loop3: p1 start 10 is beyond EOD, truncated [ 1200.996217][T21417] loop3: p2 start 25 is beyond EOD, truncated [ 1201.002435][T21417] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1201.009653][T21417] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:21:42 executing program 0: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0xffffffffffffffff, r1, 0x0, 0x0) 12:21:42 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e931190000002400000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:21:42 executing program 5: r0 = syz_usb_connect(0x0, 0x1ca, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd7, 0xd5, 0x96, 0x8, 0x4fc, 0x504a, 0xe204, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe1, 0x3e, 0x76}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000040)={0x84, &(0x7f0000001580)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1202.131502][T21425] loop3: p1 p2 p3 p4 [ 1202.135708][T21425] loop3: p1 start 10 is beyond EOD, truncated [ 1202.141860][T21425] loop3: p2 start 25 is beyond EOD, truncated [ 1202.148283][T21425] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1202.155105][T21425] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1202.354625][T17861] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 1202.594568][T17861] usb 6-1: Using ep0 maxpacket: 8 [ 1202.724641][T17861] usb 6-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=e2.04 [ 1202.733880][T17861] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1202.743051][T17861] usb 6-1: config 0 descriptor?? 12:21:43 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x86, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x172f, 0x37, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x40029}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000002c40)={0x0, 0x0, 0x29, {0x29, 0x0, "90a6895aefd79b87429d14ba8a6a2c922a8bb666b2dfea61dcba9f5bf786627df702a30d6479aa"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 12:21:43 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e931190000002500000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:21:43 executing program 1: r0 = gettid() sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x0, 0x20, 0x70bd2a, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x5156975f9c69b8f7}, 0x40084) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) dup(0xffffffffffffffff) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x135}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 1202.969339][T17861] usb 5-1: USB disconnect, device number 47 12:21:43 executing program 2: r0 = gettid() sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x135}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:21:43 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e931190000003f00000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1203.044955][T21442] loop3: p1 p2 p3 p4 [ 1203.049772][T21442] loop3: p1 start 10 is beyond EOD, truncated [ 1203.057661][T21442] loop3: p2 start 25 is beyond EOD, truncated [ 1203.065275][T21442] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1203.072101][T21442] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:21:43 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e931190000004000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1203.185084][T21454] loop3: p1 p2 p3 p4 [ 1203.190176][T21454] loop3: p1 start 10 is beyond EOD, truncated [ 1203.196670][T21454] loop3: p2 start 25 is beyond EOD, truncated [ 1203.202761][T21454] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1203.209876][T21454] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:21:44 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e931190008004000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1203.325488][T21457] loop3: p1 p2 p3 p4 [ 1203.329670][T21457] loop3: p1 start 10 is beyond EOD, truncated [ 1203.335974][T21457] loop3: p2 start 25 is beyond EOD, truncated [ 1203.342083][T21457] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1203.349090][T21457] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1203.374602][T17861] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 1203.425081][T21460] loop3: p1 p2 p3 p4 [ 1203.429220][T21460] loop3: p1 start 10 is beyond EOD, truncated [ 1203.435786][T21460] loop3: p2 start 524313 is beyond EOD, truncated [ 1203.442238][T21460] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1203.449575][T21460] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:21:44 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e931190000004800000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:21:44 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e931190000004c00000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1203.575264][T21463] loop3: p1 p2 p3 p4 [ 1203.579441][T21463] loop3: p1 start 10 is beyond EOD, truncated [ 1203.586072][T21463] loop3: p2 start 25 is beyond EOD, truncated [ 1203.592274][T21463] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1203.599511][T21463] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1203.614517][T17861] usb 5-1: Using ep0 maxpacket: 8 [ 1203.706842][T21466] loop3: p1 p2 p3 p4 [ 1203.711022][T21466] loop3: p1 start 10 is beyond EOD, truncated [ 1203.717151][T21466] loop3: p2 start 25 is beyond EOD, truncated [ 1203.723216][T21466] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1203.729991][T21466] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1203.744612][T17861] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1203.756081][T17861] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1203.766000][T17861] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1203.778914][T17861] usb 5-1: New USB device found, idVendor=172f, idProduct=0037, bcdDevice= 0.00 [ 1203.788136][T17861] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1203.798975][T17861] usb 5-1: config 0 descriptor?? [ 1203.848076][T21466] loop3: p1 p2 p3 p4 [ 1203.852219][T21466] loop3: p1 start 10 is beyond EOD, truncated [ 1203.858370][T21466] loop3: p2 start 25 is beyond EOD, truncated [ 1203.864544][T21466] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1203.871341][T21466] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1203.915220][ T153] loop3: p1 p2 p3 p4 [ 1203.920375][ T153] loop3: p1 start 10 is beyond EOD, truncated [ 1203.926646][ T153] loop3: p2 start 25 is beyond EOD, truncated [ 1203.932698][ T153] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1203.939494][ T153] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1204.265405][T17861] waltop 0003:172F:0037.0009: unknown main item tag 0x0 [ 1204.273075][T17861] waltop 0003:172F:0037.0009: hidraw0: USB HID v0.00 Device [HID 172f:0037] on usb-dummy_hcd.4-1/input0 [ 1204.466070][ T8432] usb 5-1: USB disconnect, device number 48 12:21:45 executing program 0: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, 0x0, 0x0, 0x0) 12:21:45 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e931190000006000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:21:45 executing program 5: syz_usb_connect(0x0, 0x24, &(0x7f0000000580)=ANY=[@ANYBLOB="120100000f64f1403926110077af000006010902120001000000000904"], 0x0) [ 1205.094540][T11066] usb 6-1: USB disconnect, device number 40 [ 1205.157146][T21479] loop3: p1 p2 p3 p4 [ 1205.161370][T21479] loop3: p1 start 10 is beyond EOD, truncated [ 1205.167918][T21479] loop3: p2 start 25 is beyond EOD, truncated [ 1205.173972][T21479] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1205.181182][T21479] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1205.234367][T17861] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 1205.286059][T21479] loop3: p1 p2 p3 p4 [ 1205.290269][T21479] loop3: p1 start 10 is beyond EOD, truncated [ 1205.296861][T21479] loop3: p2 start 25 is beyond EOD, truncated [ 1205.302984][T21479] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1205.310080][T21479] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1205.319166][ T153] loop3: p1 p2 p3 p4 [ 1205.324230][ T153] loop3: p1 start 10 is beyond EOD, truncated [ 1205.330886][ T153] loop3: p2 start 25 is beyond EOD, truncated [ 1205.337254][ T153] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1205.344010][ T153] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1205.474343][T17861] usb 5-1: Using ep0 maxpacket: 8 [ 1205.494427][T11066] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 1205.594409][T17861] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1205.605408][T17861] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1205.615490][T17861] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1205.628381][T17861] usb 5-1: New USB device found, idVendor=172f, idProduct=0037, bcdDevice= 0.00 [ 1205.637488][T17861] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1205.646128][T17861] usb 5-1: config 0 descriptor?? [ 1205.934352][T11066] usb 6-1: New USB device found, idVendor=2639, idProduct=0011, bcdDevice=af.77 [ 1205.943439][T11066] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=6 [ 1205.952571][T17861] waltop 0003:172F:0037.000A: unknown main item tag 0x0 [ 1205.959520][T11066] usb 6-1: SerialNumber: syz [ 1205.965332][T17861] waltop 0003:172F:0037.000A: hidraw0: USB HID v0.00 Device [HID 172f:0037] on usb-dummy_hcd.4-1/input0 [ 1205.976680][T11066] usb 6-1: config 0 descriptor?? 12:21:46 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x86, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x172f, 0x37, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x40029}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000002c40)={0x0, 0x0, 0x29, {0x29, 0x0, "90a6895aefd79b87429d14ba8a6a2c922a8bb666b2dfea61dcba9f5bf786627df702a30d6479aa"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 12:21:46 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e931190000006800000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:21:46 executing program 1: r0 = gettid() sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x0, 0x20, 0x70bd2a, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x5156975f9c69b8f7}, 0x40084) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) dup(0xffffffffffffffff) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x135}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 1205.986463][T17861] usb 5-1: USB disconnect, device number 49 12:21:46 executing program 2: r0 = gettid() sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x135}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 1206.054592][T21499] loop3: p1 p2 p3 p4 [ 1206.061193][T21499] loop3: p1 start 10 is beyond EOD, truncated [ 1206.067572][T21499] loop3: p2 start 25 is beyond EOD, truncated [ 1206.073682][T21499] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1206.081279][T21499] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:21:46 executing program 2: r0 = gettid() sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x135}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 1206.159278][T21499] loop3: p1 p2 p3 p4 [ 1206.163398][T21499] loop3: p1 start 10 is beyond EOD, truncated [ 1206.169973][T21499] loop3: p2 start 25 is beyond EOD, truncated [ 1206.176431][T21499] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1206.183297][T21499] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:21:46 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e931190000006c00000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1206.225425][ T8432] usb 6-1: USB disconnect, device number 41 [ 1206.366655][T21513] loop3: p1 p2 p3 p4 [ 1206.370911][T21513] loop3: p1 start 10 is beyond EOD, truncated [ 1206.377515][T21513] loop3: p2 start 25 is beyond EOD, truncated [ 1206.383594][T21513] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1206.390769][T21513] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1206.394271][T17861] usb 5-1: new high-speed USB device number 50 using dummy_hcd 12:21:47 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e931190000007400000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1206.484682][T21513] loop3: p1 p2 p3 p4 [ 1206.488862][T21513] loop3: p1 start 10 is beyond EOD, truncated [ 1206.495036][T21513] loop3: p2 start 25 is beyond EOD, truncated [ 1206.501131][T21513] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1206.507944][T21513] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:21:47 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e931190000007a00000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1206.644250][T17861] usb 5-1: Using ep0 maxpacket: 8 [ 1206.655443][T21517] loop3: p1 p2 p3 p4 [ 1206.659621][T21517] loop3: p1 start 10 is beyond EOD, truncated [ 1206.666135][T21517] loop3: p2 start 25 is beyond EOD, truncated [ 1206.672257][T21517] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1206.679236][T21517] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1206.764373][T17861] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1206.775841][T21520] loop3: p1 p2 p3 p4 [ 1206.776370][T17861] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1206.780215][T21520] loop3: p1 start 10 is beyond EOD, truncated [ 1206.790707][T17861] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1206.795954][T21520] loop3: p2 start 25 is beyond EOD, truncated [ 1206.809167][T17861] usb 5-1: New USB device found, idVendor=172f, idProduct=0037, bcdDevice= 0.00 [ 1206.814754][T21520] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1206.824128][T17861] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1206.830543][T21520] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1206.839520][T17861] usb 5-1: config 0 descriptor?? 12:21:47 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e931190000048000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1206.925712][T21520] loop3: p1 p2 p3 p4 [ 1206.929950][T21520] loop3: p1 start 10 is beyond EOD, truncated [ 1206.936127][T21520] loop3: p2 start 25 is beyond EOD, truncated [ 1206.942177][T21520] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1206.948985][T21520] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1206.957824][ T153] loop3: p1 p2 p3 p4 [ 1206.962409][ T153] loop3: p1 start 10 is beyond EOD, truncated [ 1206.969079][ T153] loop3: p2 start 25 is beyond EOD, truncated [ 1206.975291][ T153] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1206.982094][ T153] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1206.994254][T11066] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 1207.064825][T21524] loop3: p1 p2 p3 p4 [ 1207.068959][T21524] loop3: p1 start 10 is beyond EOD, truncated [ 1207.075271][T21524] loop3: p2 start 67108889 is beyond EOD, truncated [ 1207.081929][T21524] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1207.088731][T21524] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1207.325085][T17861] waltop 0003:172F:0037.000B: unknown main item tag 0x0 [ 1207.332782][T17861] waltop 0003:172F:0037.000B: hidraw0: USB HID v0.00 Device [HID 172f:0037] on usb-dummy_hcd.4-1/input0 [ 1207.434257][T11066] usb 6-1: New USB device found, idVendor=2639, idProduct=0011, bcdDevice=af.77 [ 1207.443445][T11066] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=6 [ 1207.451954][T11066] usb 6-1: SerialNumber: syz [ 1207.457405][T11066] usb 6-1: config 0 descriptor?? [ 1207.530999][T11066] usb 5-1: USB disconnect, device number 50 [ 1207.697754][T17861] usb 6-1: USB disconnect, device number 42 12:21:48 executing program 0: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, 0x0, 0x0, 0x0) 12:21:48 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e93119ffffff8000000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:21:48 executing program 5: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0xa6, 0x6f, 0x1b, 0x40, 0xbda, 0x317f, 0x9dcc, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81}}, {{0x9, 0x5, 0xe}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001bc0)={0x84, &(0x7f0000000080)={0x0, 0x0, 0x3, "1374ee"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000001a80)={0x0, 0x0, 0x1, "1c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000180)={0x0, 0x0, 0x1, "db"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 12:21:48 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000204d041cc304000000000109022440010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001c80)={0x84, 0x0, 0x0, 0x0, &(0x7f0000001940)={0x20, 0x0, 0x4, {0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) 12:21:49 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e931198f82698c00000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1208.244816][T21541] loop3: p1 p2 p3 p4 [ 1208.248941][T21541] loop3: p1 start 10 is beyond EOD, truncated [ 1208.255527][T21541] loop3: p2 start 4294967065 is beyond EOD, truncated [ 1208.262283][T21541] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1208.269538][T21541] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1208.374500][T21550] loop3: p1 p2 p3 p4 [ 1208.378842][T21550] loop3: p1 start 10 is beyond EOD, truncated [ 1208.385457][T21550] loop3: p2 start 1770163993 is beyond EOD, truncated [ 1208.392250][T21550] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1208.399503][T21550] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1208.464162][ T8432] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 1208.504120][T11066] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 1208.764103][T11066] usb 5-1: Using ep0 maxpacket: 16 [ 1208.824116][ T8432] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1208.834311][ T8432] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 1208.844009][ T8432] usb 6-1: New USB device found, idVendor=0bda, idProduct=317f, bcdDevice=9d.cc [ 1208.853294][ T8432] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1208.861968][ T8432] usb 6-1: config 0 descriptor?? [ 1208.904138][T11066] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1208.917049][T11066] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1208.926584][T11066] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1208.935391][T11066] usb 5-1: config 0 descriptor?? 12:21:49 executing program 1: r0 = gettid() sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x0, 0x20, 0x70bd2a, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x5156975f9c69b8f7}, 0x40084) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) dup(0xffffffffffffffff) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x135}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:21:49 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e93119ffffff8c00000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1208.984638][T11066] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1209.074634][T21560] loop3: p1 p2 p3 p4 [ 1209.078745][T21560] loop3: p1 start 10 is beyond EOD, truncated [ 1209.084880][T21560] loop3: p2 start 4294967065 is beyond EOD, truncated [ 1209.091709][T21560] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1209.098548][T21560] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:21:49 executing program 2: r0 = gettid() sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x135}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:21:49 executing program 1: r0 = gettid() sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x38}}, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x0, 0x20, 0x70bd2a, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x5156975f9c69b8f7}, 0x40084) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) dup(0xffffffffffffffff) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x135}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:21:49 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e931198c69828f00000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1209.185018][ T8432] usb 5-1: USB disconnect, device number 51 [ 1209.254365][T21568] loop3: p1 p2 p3 p4 [ 1209.258554][T21568] loop3: p1 start 10 is beyond EOD, truncated [ 1209.265513][T21568] loop3: p2 start 2187955225 is beyond EOD, truncated [ 1209.272325][T21568] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1209.279621][T21568] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:21:50 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e93119ffffff9700000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1209.394582][T21568] loop3: p1 p2 p3 p4 [ 1209.398790][T21568] loop3: p1 start 10 is beyond EOD, truncated [ 1209.405369][T21568] loop3: p2 start 2187955225 is beyond EOD, truncated [ 1209.412208][T21568] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1209.419411][T21568] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1209.564668][T21582] loop3: p1 p2 p3 p4 [ 1209.569248][T21582] loop3: p1 start 10 is beyond EOD, truncated [ 1209.578013][T21582] loop3: p2 start 4294967065 is beyond EOD, truncated [ 1209.585330][T21582] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1209.592089][T21582] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1209.654019][T11066] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 1209.674534][T21582] loop3: p1 p2 p3 p4 [ 1209.678705][T21582] loop3: p1 start 10 is beyond EOD, truncated [ 1209.685219][T21582] loop3: p2 start 4294967065 is beyond EOD, truncated [ 1209.692021][T21582] loop3: p3 start 4293001441 is beyond EOD, truncated 12:21:50 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e93119ffffffa100000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1209.698987][T21582] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1209.844560][T21587] loop3: p1 p2 p3 p4 [ 1209.848773][T21587] loop3: p1 start 10 is beyond EOD, truncated [ 1209.854926][T21587] loop3: p2 start 4294967065 is beyond EOD, truncated [ 1209.861737][T21587] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1209.868586][T21587] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1209.893982][T11066] usb 5-1: Using ep0 maxpacket: 32 [ 1209.954335][T21587] loop3: p1 p2 p3 p4 [ 1209.958503][T21587] loop3: p1 start 10 is beyond EOD, truncated [ 1209.965180][T21587] loop3: p2 start 4294967065 is beyond EOD, truncated [ 1209.971945][T21587] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1209.979193][T21587] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1210.014068][T11066] usb 5-1: config index 0 descriptor too short (expected 16420, got 36) [ 1210.022521][T11066] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1210.034744][T11066] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1210.044556][T11066] usb 5-1: New USB device found, idVendor=044d, idProduct=c31c, bcdDevice= 0.04 [ 1210.053624][T11066] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1210.062377][T11066] usb 5-1: config 0 descriptor?? [ 1210.067907][ T153] loop3: p1 p2 p3 p4 [ 1210.072044][ T153] loop3: p1 start 10 is beyond EOD, truncated [ 1210.078226][ T153] loop3: p2 start 4294967065 is beyond EOD, truncated [ 1210.084991][ T153] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1210.091733][ T153] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1210.105524][T11066] hub 5-1:0.0: USB hub found [ 1210.323993][T11066] hub 5-1:0.0: 1 port detected [ 1210.973938][T11066] hub 5-1:0.0: activate --> -90 [ 1211.200987][T17861] usb 6-1: USB disconnect, device number 43 12:21:51 executing program 0: r0 = gettid() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x139}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, 0x0, 0x0, 0x0) 12:21:51 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e93119000026b900000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:21:51 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xe5, 0xe7, 0xf9, 0x8, 0xb95, 0x172a, 0x7822, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x90, 0x71, 0x39}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000680)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x40, 0x13, 0x6, @remote}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000001300)={0x34, &(0x7f0000001040), 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1211.304224][T21595] loop3: p1 p2 p3 p4 [ 1211.308382][T21595] loop3: p1 start 10 is beyond EOD, truncated [ 1211.315090][T21595] loop3: p2 start 637534233 is beyond EOD, truncated [ 1211.321817][T21595] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1211.329051][T21595] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1211.395321][T12006] usb 5-1: USB disconnect, device number 52 [ 1211.683841][T17861] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 1211.923845][T17861] usb 6-1: Using ep0 maxpacket: 8 [ 1212.063866][T17861] usb 6-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=78.22 [ 1212.072957][T17861] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1212.081704][T17861] usb 6-1: config 0 descriptor?? [ 1212.163818][ T8432] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 1212.433762][ T8432] usb 5-1: Using ep0 maxpacket: 16 [ 1212.553819][ T8432] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1212.566712][ T8432] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1212.573831][T17861] asix 6-1:0.0 (unnamed net_device) (uninitialized): Interface mode not supported by driver [ 1212.575990][ T8432] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1212.587667][T17861] asix: probe of 6-1:0.0 failed with error -524 [ 1212.602116][ T8432] usb 5-1: config 0 descriptor?? [ 1212.645821][ T8432] usbhid 5-1:0.0: couldn't find an input interrupt endpoint 12:21:53 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000204d041cc304000000000109022440010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001c80)={0x84, 0x0, 0x0, 0x0, &(0x7f0000001940)={0x20, 0x0, 0x4, {0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) 12:21:53 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e93119ffffffc900000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:21:53 executing program 2: r0 = gettid() sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x135}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:21:53 executing program 1: r0 = gettid() sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x38}}, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x0, 0x20, 0x70bd2a, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x5156975f9c69b8f7}, 0x40084) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) dup(0xffffffffffffffff) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x135}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 1212.698818][ T8432] usb 5-1: USB disconnect, device number 53 12:21:53 executing program 2: r0 = gettid() sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x135}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:21:53 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e93119ffffffe400000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1212.754372][T21617] loop3: p1 p2 p3 p4 [ 1212.765665][T21617] loop3: p1 start 10 is beyond EOD, truncated [ 1212.774287][T21617] loop3: p2 start 4294967065 is beyond EOD, truncated [ 1212.776457][T17861] usb 6-1: USB disconnect, device number 44 [ 1212.782347][T21617] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1212.794265][T21617] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:21:53 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e93119000004f500000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1212.864715][T21631] loop3: p1 p2 p3 p4 [ 1212.868952][T21631] loop3: p1 start 10 is beyond EOD, truncated [ 1212.875744][T21631] loop3: p2 start 4294967065 is beyond EOD, truncated [ 1212.882615][T21631] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1212.890012][T21631] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1212.984676][T21635] loop3: p1 p2 p3 p4 [ 1212.988934][T21635] loop3: p1 start 10 is beyond EOD, truncated [ 1212.995656][T21635] loop3: p2 start 67108889 is beyond EOD, truncated [ 1213.002244][T21635] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1213.009543][T21635] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:21:53 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e93119fffffff600000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1213.103737][ T8432] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 1213.124416][T21638] loop3: p1 p2 p3 p4 [ 1213.128553][T21638] loop3: p1 start 10 is beyond EOD, truncated [ 1213.134834][T21638] loop3: p2 start 4294967065 is beyond EOD, truncated [ 1213.141672][T21638] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1213.148545][T21638] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:21:54 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e93119fffffdfd00000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1213.255845][T21638] loop3: p1 p2 p3 p4 [ 1213.260592][T21638] loop3: p1 start 10 is beyond EOD, truncated [ 1213.266784][T21638] loop3: p2 start 4294967065 is beyond EOD, truncated [ 1213.273567][T21638] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1213.280544][T21638] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1213.289477][ T153] loop3: p1 p2 p3 p4 [ 1213.294655][ T153] loop3: p1 start 10 is beyond EOD, truncated [ 1213.300801][ T153] loop3: p2 start 4294967065 is beyond EOD, truncated [ 1213.308245][ T153] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1213.315528][ T153] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1213.343703][ T8432] usb 5-1: Using ep0 maxpacket: 16 [ 1213.429708][T21643] loop3: p1 p2 p3 p4 [ 1213.433877][T21643] loop3: p1 start 10 is beyond EOD, truncated [ 1213.439990][T21643] loop3: p2 start 4261412633 is beyond EOD, truncated [ 1213.447392][T21643] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1213.454789][T21643] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1213.463795][ T8432] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1213.476935][ T8432] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1213.485987][ T8432] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1213.494601][ T8432] usb 5-1: config 0 descriptor?? [ 1213.534149][ T8432] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1213.544690][ T113] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 1213.554815][T21643] loop3: p1 p2 p3 p4 [ 1213.558872][T21643] loop3: p1 start 10 is beyond EOD, truncated [ 1213.565568][T21643] loop3: p2 start 4261412633 is beyond EOD, truncated [ 1213.572313][T21643] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1213.579506][T21643] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1213.738037][ T8432] usb 5-1: USB disconnect, device number 54 [ 1213.783834][ T113] usb 6-1: Using ep0 maxpacket: 8 [ 1213.903732][ T113] usb 6-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=78.22 [ 1213.912839][ T113] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1213.922363][ T113] usb 6-1: config 0 descriptor?? [ 1214.213735][ T113] asix 6-1:0.0 (unnamed net_device) (uninitialized): Interface mode not supported by driver [ 1214.224002][ T113] asix: probe of 6-1:0.0 failed with error -524 12:21:55 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xe5, 0xe7, 0xf9, 0x8, 0xb95, 0x172a, 0x7822, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x90, 0x71, 0x39}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000680)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x40, 0x13, 0x6, @remote}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000001300)={0x34, &(0x7f0000001040), 0x0, 0x0, 0x0, 0x0, 0x0}) 12:21:55 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e93119fffffffd00000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:21:55 executing program 0: syz_usb_connect(0x0, 0x3f, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000c015e810da059a007bca0000000109022d00010000000009040000038c88740009058d020000000000090501eac2825c000009058f2e"], 0x0) [ 1214.273010][ T113] usb 6-1: USB disconnect, device number 45 [ 1214.293633][ T8432] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 1214.324428][T21658] loop3: p1 p2 p3 p4 [ 1214.328609][T21658] loop3: p1 start 10 is beyond EOD, truncated [ 1214.335181][T21658] loop3: p2 start 4294967065 is beyond EOD, truncated [ 1214.341967][T21658] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1214.349242][T21658] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1214.533629][ T8432] usb 5-1: Using ep0 maxpacket: 32 [ 1214.583634][T17861] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 1214.653663][ T8432] usb 5-1: config index 0 descriptor too short (expected 16420, got 36) [ 1214.662129][ T8432] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1214.673775][ T113] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 1214.681442][ T8432] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1214.691840][ T8432] usb 5-1: New USB device found, idVendor=044d, idProduct=c31c, bcdDevice= 0.04 [ 1214.701398][ T8432] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1214.710368][ T8432] usb 5-1: config 0 descriptor?? [ 1214.754071][ T8432] hub 5-1:0.0: USB hub found [ 1214.843580][T17861] usb 1-1: Using ep0 maxpacket: 16 [ 1214.913599][ T113] usb 6-1: Using ep0 maxpacket: 8 [ 1214.963648][T17861] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 1214.973453][T17861] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 0 [ 1214.973713][ T8432] hub 5-1:0.0: 1 port detected [ 1214.983439][T17861] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 706 [ 1214.997751][T17861] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1215.007469][T17861] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 0 [ 1215.017214][T17861] usb 1-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=ca.7b [ 1215.026589][T17861] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1215.033630][ T113] usb 6-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=78.22 [ 1215.035209][T17861] usb 1-1: config 0 descriptor?? [ 1215.046750][ T113] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1215.057171][ T113] usb 6-1: config 0 descriptor?? [ 1215.073656][T21660] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1215.297298][T17814] usb 1-1: USB disconnect, device number 11 [ 1215.523575][ T113] asix 6-1:0.0 (unnamed net_device) (uninitialized): Interface mode not supported by driver [ 1215.533921][ T113] asix: probe of 6-1:0.0 failed with error -524 [ 1215.613559][ T8432] hub 5-1:0.0: activate --> -90 [ 1215.728127][T17861] usb 6-1: USB disconnect, device number 46 [ 1216.024175][ T113] usb 5-1: USB disconnect, device number 55 [ 1216.063553][T12006] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 1216.313466][T12006] usb 1-1: Using ep0 maxpacket: 16 [ 1216.433531][T12006] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 1216.443575][T12006] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 0 [ 1216.453303][T12006] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 706 [ 1216.464126][T12006] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1216.474192][T12006] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 0 12:21:57 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000204d041cc304000000000109022440010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001c80)={0x84, 0x0, 0x0, 0x0, &(0x7f0000001940)={0x20, 0x0, 0x4, {0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) 12:21:57 executing program 1: r0 = gettid() sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x38}}, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x0, 0x20, 0x70bd2a, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x5156975f9c69b8f7}, 0x40084) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) dup(0xffffffffffffffff) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x135}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:21:57 executing program 2: r0 = gettid() sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x135}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:21:57 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e93119fffffffe00000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:21:57 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xe5, 0xe7, 0xf9, 0x8, 0xb95, 0x172a, 0x7822, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x90, 0x71, 0x39}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000680)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x40, 0x13, 0x6, @remote}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000001300)={0x34, &(0x7f0000001040), 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1216.484271][T12006] usb 1-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=ca.7b [ 1216.495611][T12006] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1216.504396][T12006] usb 1-1: config 0 descriptor?? [ 1216.523556][T21660] raw-gadget gadget: fail, usb_ep_enable returned -22 12:21:57 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e9311900000fff00000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1216.604145][T21692] loop3: p1 p2 p3 p4 [ 1216.608315][T21692] loop3: p1 start 10 is beyond EOD, truncated [ 1216.614960][T21692] loop3: p2 start 4294967065 is beyond EOD, truncated [ 1216.621796][T21692] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1216.629016][T21692] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:21:57 executing program 0: r0 = syz_usb_connect$cdc_ecm(0x0, 0x51, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x424, 0x9e00, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3f, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, [@mdlm_detail={0x4}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0xf7}}, {{0x9, 0x5, 0x3, 0x2, 0x234}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x84, &(0x7f00000004c0)={0x0, 0x0, 0x1, 'S'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000004c40)={0x84, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000300), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 12:21:57 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e93119ffffefff00000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1216.724007][T21700] loop3: p1 p2 p3 p4 [ 1216.728139][T21700] loop3: p1 start 10 is beyond EOD, truncated [ 1216.734760][T21700] loop3: p2 start 251658265 is beyond EOD, truncated [ 1216.741431][T21700] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1216.748473][T17861] usb 1-1: USB disconnect, device number 12 [ 1216.749474][T21700] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1216.813531][T12006] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 1216.833443][ T113] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 1216.874014][T21705] loop3: p1 p2 p3 p4 [ 1216.878172][T21705] loop3: p1 start 10 is beyond EOD, truncated [ 1216.884771][T21705] loop3: p2 start 4026531609 is beyond EOD, truncated [ 1216.891513][T21705] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1216.898740][T21705] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1216.993773][T21705] loop3: p1 p2 p3 p4 [ 1216.997902][T21705] loop3: p1 start 10 is beyond EOD, truncated [ 1217.004550][T21705] loop3: p2 start 4026531609 is beyond EOD, truncated [ 1217.011312][T21705] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1217.018537][T21705] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1217.053410][T12006] usb 5-1: Using ep0 maxpacket: 16 12:21:57 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e93119000fffff00000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1217.074066][ T153] loop3: p1 p2 p3 p4 [ 1217.079172][ T153] loop3: p1 start 10 is beyond EOD, truncated [ 1217.083476][ T113] usb 6-1: Using ep0 maxpacket: 8 [ 1217.085595][ T153] loop3: p2 start 4026531609 is beyond EOD, truncated [ 1217.097207][ T153] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1217.103987][ T153] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1217.163412][T17861] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 1217.173873][T12006] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1217.186741][T12006] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1217.196458][T12006] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1217.203456][ T113] usb 6-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=78.22 [ 1217.206071][T12006] usb 5-1: config 0 descriptor?? [ 1217.213694][ T113] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1217.220605][ T153] loop3: p1 p2 p3 p4 [ 1217.230819][ T153] loop3: p1 start 10 is beyond EOD, truncated [ 1217.237347][ T113] usb 6-1: config 0 descriptor?? [ 1217.242357][ T153] loop3: p2 start 4279173145 is beyond EOD, truncated [ 1217.249973][ T153] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1217.257079][ T153] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1217.263917][T12006] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1217.272668][T21709] loop3: p1 p2 p3 p4 [ 1217.277244][T21709] loop3: p1 start 10 is beyond EOD, truncated [ 1217.283884][T21709] loop3: p2 start 4279173145 is beyond EOD, truncated [ 1217.290663][T21709] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1217.297463][T21709] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:21:58 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e93119ffefffff00000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1217.375317][T21709] loop3: p1 p2 p3 p4 [ 1217.379477][T21709] loop3: p1 start 10 is beyond EOD, truncated [ 1217.385571][T21709] loop3: p2 start 4279173145 is beyond EOD, truncated [ 1217.392308][T21709] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1217.399166][T21709] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1217.413456][T17861] usb 1-1: Using ep0 maxpacket: 8 [ 1217.469190][T12006] usb 5-1: USB disconnect, device number 56 [ 1217.475799][ T153] loop3: p1 p2 p3 p4 [ 1217.480236][ T153] loop3: p1 start 10 is beyond EOD, truncated [ 1217.487282][ T153] loop3: p2 start 4279173145 is beyond EOD, truncated [ 1217.494076][ T153] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1217.500824][ T153] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1217.563439][T17861] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 247 [ 1217.573412][T17861] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 564 [ 1217.583222][T17861] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1217.614067][T21713] loop3: p1 p2 p3 p4 [ 1217.618203][T21713] loop3: p1 start 10 is beyond EOD, truncated [ 1217.624811][T21713] loop3: p2 start 4293918489 is beyond EOD, truncated [ 1217.631613][T21713] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1217.639073][T21713] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:21:58 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e93119fdfdffff00000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1217.713461][ T113] asix 6-1:0.0 (unnamed net_device) (uninitialized): Interface mode not supported by driver [ 1217.723638][ T113] asix: probe of 6-1:0.0 failed with error -524 [ 1217.745345][T21716] loop3: p1 p2 p3 p4 [ 1217.749446][T21716] loop3: p1 start 10 is beyond EOD, truncated [ 1217.755580][T21716] loop3: p2 start 4294835481 is beyond EOD, truncated [ 1217.762327][T21716] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1217.769109][T21716] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1217.783404][T17861] usb 1-1: New USB device found, idVendor=0424, idProduct=9e00, bcdDevice= 0.40 [ 1217.792497][T17861] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1217.800658][T17861] usb 1-1: Product: syz [ 1217.804954][T17861] usb 1-1: Manufacturer: syz [ 1217.809538][T17861] usb 1-1: SerialNumber: syz [ 1217.833410][T21703] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1217.840275][T21703] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1217.847884][T21716] loop3: p1 p2 p3 p4 [ 1217.851981][T21716] loop3: p1 start 10 is beyond EOD, truncated [ 1217.858234][T21716] loop3: p2 start 4294835481 is beyond EOD, truncated [ 1217.863829][T17861] usb 1-1: bad CDC descriptors [ 1217.865315][T21716] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1217.872640][T17861] smsc95xx v1.0.6 12:21:58 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e931197fffffff00000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1217.876670][T21716] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1217.918773][T21604] usb 6-1: USB disconnect, device number 47 [ 1218.034996][T21720] loop3: p1 p2 p3 p4 [ 1218.039288][T21720] loop3: p1 start 10 is beyond EOD, truncated [ 1218.045559][T21720] loop3: p2 start 4294934297 is beyond EOD, truncated [ 1218.052334][T21720] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1218.059123][T12006] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 1218.066699][T21720] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1218.067012][T21703] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1218.081347][T21703] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1218.088824][ T153] loop3: p1 p2 p3 p4 [ 1218.092934][ T153] loop3: p1 start 10 is beyond EOD, truncated [ 1218.099495][ T153] loop3: p2 start 4294934297 is beyond EOD, truncated [ 1218.106592][ T153] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1218.113729][ T153] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1218.323309][T12006] usb 5-1: Using ep0 maxpacket: 32 [ 1218.333447][T17861] smsc95xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1218.344223][T17861] smsc95xx 1-1:1.0 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1218.453339][T12006] usb 5-1: config index 0 descriptor too short (expected 16420, got 36) [ 1218.461789][T12006] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1218.472908][T12006] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1218.482663][T12006] usb 5-1: New USB device found, idVendor=044d, idProduct=c31c, bcdDevice= 0.04 [ 1218.491713][T12006] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1218.501989][T12006] usb 5-1: config 0 descriptor?? [ 1218.543861][T12006] hub 5-1:0.0: USB hub found [ 1218.763351][T12006] hub 5-1:0.0: 1 port detected [ 1219.413300][T12006] hub 5-1:0.0: activate --> -90 [ 1219.844003][T21604] usb 5-1: USB disconnect, device number 57 [ 1220.133241][T17861] smsc95xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1220.163214][T17861] smsc95xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000000: -71 [ 1220.173920][T17861] smsc95xx: probe of 1-1:1.0 failed with error -71 [ 1220.181471][T17861] usb 1-1: USB disconnect, device number 13 12:22:01 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000204d041cc304000000000109022440010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001c80)={0x84, 0x0, 0x0, 0x0, &(0x7f0000001940)={0x20, 0x0, 0x4, {0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) 12:22:01 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e9311980ffffff00000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:22:01 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xe5, 0xe7, 0xf9, 0x8, 0xb95, 0x172a, 0x7822, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x90, 0x71, 0x39}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000680)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x40, 0x13, 0x6, @remote}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000001300)={0x34, &(0x7f0000001040), 0x0, 0x0, 0x0, 0x0, 0x0}) 12:22:01 executing program 1: r0 = gettid() sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x38}}, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, 0x0, 0x40084) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) dup(0xffffffffffffffff) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x135}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:22:01 executing program 2: r0 = gettid() sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x135}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:22:01 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e931198cffffff00000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1220.414144][T21744] loop3: p1 p2 p3 p4 [ 1220.418354][T21744] loop3: p1 start 10 is beyond EOD, truncated [ 1220.424705][T21744] loop3: p2 start 4294934553 is beyond EOD, truncated [ 1220.431483][T21744] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1220.438280][T21744] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1220.523726][T21749] loop3: p1 p2 p3 p4 [ 1220.527868][T21749] loop3: p1 start 10 is beyond EOD, truncated [ 1220.534412][T21749] loop3: p2 start 4294937625 is beyond EOD, truncated [ 1220.541205][T21749] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1220.548432][T21749] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1220.623142][T21604] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 1220.623148][ T113] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 1220.863099][ T113] usb 5-1: Using ep0 maxpacket: 16 [ 1220.883120][T17861] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 1220.890721][T21604] usb 6-1: Using ep0 maxpacket: 8 [ 1220.983162][ T113] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1220.996054][ T113] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1221.005635][ T113] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1221.014471][ T113] usb 5-1: config 0 descriptor?? [ 1221.023238][T21604] usb 6-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=78.22 [ 1221.032402][T21604] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1221.041199][T21604] usb 6-1: config 0 descriptor?? [ 1221.053581][ T113] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1221.153087][T17861] usb 1-1: Using ep0 maxpacket: 8 [ 1221.256414][ T113] usb 5-1: USB disconnect, device number 58 [ 1221.273172][T17861] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 247 [ 1221.283266][T17861] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 564 [ 1221.293279][T17861] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 12:22:02 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e9311997ffffff00000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:22:02 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000000340)={&(0x7f0000000080)={0xa, 0x4e21, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="14"], 0x18}, 0x0) 12:22:02 executing program 0: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x9}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, [], 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) 12:22:02 executing program 0: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x9}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, [], 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) [ 1221.469616][T21762] loop3: p1 p2 p3 p4 [ 1221.474123][T21762] loop3: p1 start 10 is beyond EOD, truncated [ 1221.483753][T17861] usb 1-1: New USB device found, idVendor=0424, idProduct=9e00, bcdDevice= 0.40 [ 1221.486647][T21762] loop3: p2 start 4294940441 is beyond EOD, truncated [ 1221.493360][T17861] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1221.500560][T21762] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1221.511872][T17861] usb 1-1: Product: syz 12:22:02 executing program 0: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x9}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, [], 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) 12:22:02 executing program 0: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x9}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, [], 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) [ 1221.515375][T21762] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1221.533157][T21604] asix 6-1:0.0 (unnamed net_device) (uninitialized): Interface mode not supported by driver [ 1221.543444][T17861] usb 1-1: can't set config #1, error -71 [ 1221.550475][T17861] usb 1-1: USB disconnect, device number 14 [ 1221.556926][T21604] asix: probe of 6-1:0.0 failed with error -524 [ 1221.614875][T21762] loop3: p1 p2 p3 p4 [ 1221.618957][T21762] loop3: p1 start 10 is beyond EOD, truncated [ 1221.625872][T21762] loop3: p2 start 4294940441 is beyond EOD, truncated [ 1221.632704][T21762] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1221.639582][T21762] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1221.673912][ T153] loop3: p1 p2 p3 p4 [ 1221.678402][ T153] loop3: p1 start 10 is beyond EOD, truncated [ 1221.684994][ T153] loop3: p2 start 4294940441 is beyond EOD, truncated [ 1221.691898][ T153] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1221.699203][ T153] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1221.736134][T21604] usb 6-1: USB disconnect, device number 48 [ 1221.813095][ T113] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 1222.053012][ T113] usb 5-1: Using ep0 maxpacket: 32 [ 1222.173043][ T113] usb 5-1: config index 0 descriptor too short (expected 16420, got 36) [ 1222.181468][ T113] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1222.192529][ T113] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1222.202364][ T113] usb 5-1: New USB device found, idVendor=044d, idProduct=c31c, bcdDevice= 0.04 [ 1222.211401][ T113] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1222.219972][ T113] usb 5-1: config 0 descriptor?? [ 1222.263438][ T113] hub 5-1:0.0: USB hub found [ 1222.483026][ T113] hub 5-1:0.0: 1 port detected [ 1223.132988][ T113] hub 5-1:0.0: activate --> -90 [ 1223.553516][ T8432] usb 5-1: USB disconnect, device number 59 12:22:04 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000204d041cc304000000000109022440010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001c80)={0x84, 0x0, 0x0, 0x0, &(0x7f0000001940)={0x20, 0x0, 0x4, {0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 12:22:04 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x9}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) 12:22:04 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e93119a1ffffff00000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:22:04 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xe5, 0xe7, 0xf9, 0x8, 0xb95, 0x172a, 0x7822, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x90, 0x71, 0x39}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000680)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x40, 0x13, 0x6, @remote}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 12:22:04 executing program 1: r0 = gettid() sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x38}}, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, 0x0, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) dup(0xffffffffffffffff) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x135}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:22:04 executing program 2: r0 = gettid() sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x135}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:22:04 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x9}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) 12:22:04 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x9}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) 12:22:04 executing program 0: r0 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x9}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, [], 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) 12:22:04 executing program 0: r0 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x9}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, [], 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) 12:22:04 executing program 0: r0 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x9}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, [], 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) [ 1224.105912][T21794] loop3: p1 p2 p3 p4 [ 1224.110079][T21794] loop3: p1 start 10 is beyond EOD, truncated [ 1224.116534][T21794] loop3: p2 start 4294943001 is beyond EOD, truncated [ 1224.123637][T21794] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1224.131697][T21794] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:22:04 executing program 0: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x9}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, [], 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) [ 1224.247203][T21794] loop3: p1 p2 p3 p4 [ 1224.254524][T21794] loop3: p1 start 10 is beyond EOD, truncated [ 1224.260601][T21794] loop3: p2 start 4294943001 is beyond EOD, truncated [ 1224.267698][T21794] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1224.274876][T21794] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1224.342836][T21604] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 1224.350468][T17861] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 1224.592842][T21604] usb 6-1: Using ep0 maxpacket: 8 [ 1224.597954][T17861] usb 5-1: Using ep0 maxpacket: 16 [ 1224.712859][T21604] usb 6-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=78.22 [ 1224.721957][T21604] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1224.730505][T17861] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1224.743533][T17861] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1224.752723][T21604] usb 6-1: config 0 descriptor?? [ 1224.759277][T17861] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1224.768071][T17861] usb 5-1: config 0 descriptor?? [ 1224.813329][T17861] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1225.013785][ T8432] usb 5-1: USB disconnect, device number 60 [ 1225.222857][T21604] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1225.232935][T21604] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71 [ 1225.246141][T21604] asix: probe of 6-1:0.0 failed with error -71 [ 1225.253663][T21604] usb 6-1: USB disconnect, device number 49 [ 1225.482753][T17861] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 1225.722721][T17861] usb 5-1: Using ep0 maxpacket: 32 [ 1225.842803][T17861] usb 5-1: config index 0 descriptor too short (expected 16420, got 36) [ 1225.851203][T17861] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1225.862248][T17861] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1225.872006][T17861] usb 5-1: New USB device found, idVendor=044d, idProduct=c31c, bcdDevice= 0.04 [ 1225.881182][T17861] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1225.889721][T17861] usb 5-1: config 0 descriptor?? [ 1225.933184][T17861] hub 5-1:0.0: USB hub found [ 1226.152750][T17861] hub 5-1:0.0: 1 port detected [ 1226.802677][T17861] hub 5-1:0.0: activate --> -90 [ 1227.223108][T21604] usb 5-1: USB disconnect, device number 61 12:22:08 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000204d041cc304000000000109022440010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) 12:22:08 executing program 0: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x9}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, [], 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) 12:22:08 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e93119c9ffffff00000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:22:08 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xe5, 0xe7, 0xf9, 0x8, 0xb95, 0x172a, 0x7822, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x90, 0x71, 0x39}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000680)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x40, 0x13, 0x6, @remote}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 12:22:08 executing program 1: r0 = gettid() sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x38}}, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) dup(0xffffffffffffffff) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x135}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:22:08 executing program 2: r0 = gettid() sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x135}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:22:08 executing program 0: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x9}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, [], 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) 12:22:08 executing program 0: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x9}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, [], 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) 12:22:08 executing program 1: r0 = gettid() sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x38}}, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) dup(0xffffffffffffffff) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x135}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:22:08 executing program 0: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x9}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, [], 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) 12:22:08 executing program 0: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x9}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, [], 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) 12:22:08 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) [ 1227.793898][T21840] loop3: p1 p2 p3 p4 [ 1227.803738][T21840] loop3: p1 start 10 is beyond EOD, truncated [ 1227.817345][T21840] loop3: p2 start 4294953241 is beyond EOD, truncated [ 1227.828923][T21840] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1227.836593][T21840] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1228.012556][ T8432] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 1228.012576][T21604] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 1228.252519][ T8432] usb 6-1: Using ep0 maxpacket: 8 [ 1228.262932][T21604] usb 5-1: Using ep0 maxpacket: 16 [ 1228.372586][ T8432] usb 6-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=78.22 [ 1228.381831][ T8432] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1228.390673][ T8432] usb 6-1: config 0 descriptor?? [ 1228.393394][T21604] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1228.408370][T21604] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1228.417402][T21604] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1228.426144][T21604] usb 5-1: config 0 descriptor?? [ 1228.473107][T21604] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1228.673924][T21604] usb 5-1: USB disconnect, device number 62 [ 1228.872523][ T8432] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1228.882502][ T8432] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71 [ 1228.895720][ T8432] asix: probe of 6-1:0.0 failed with error -71 [ 1228.902734][ T8432] usb 6-1: USB disconnect, device number 50 [ 1229.242481][T21604] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 1229.482426][T21604] usb 5-1: Using ep0 maxpacket: 32 [ 1229.602465][T21604] usb 5-1: config index 0 descriptor too short (expected 16420, got 36) [ 1229.610985][T21604] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1229.621965][T21604] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1229.631732][T21604] usb 5-1: New USB device found, idVendor=044d, idProduct=c31c, bcdDevice= 0.04 [ 1229.640786][T21604] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1229.649445][T21604] usb 5-1: config 0 descriptor?? [ 1229.692842][T21604] hub 5-1:0.0: USB hub found [ 1229.912496][T21604] hub 5-1:0.0: 1 port detected [ 1230.552417][T21604] hub 5-1:0.0: activate --> -90 [ 1230.752794][T17861] usb 5-1: USB disconnect, device number 63 [ 1230.762525][T21604] hub 5-1:0.0: hub_ext_port_status failed (err = -71) 12:22:11 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e93119e4ffffff00000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:22:11 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) 12:22:11 executing program 1: r0 = gettid() sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x38}}, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) dup(0xffffffffffffffff) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x135}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:22:11 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xe5, 0xe7, 0xf9, 0x8, 0xb95, 0x172a, 0x7822, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x90, 0x71, 0x39}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000680)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x40, 0x13, 0x6, @remote}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 12:22:11 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000204d041cc304000000000109022440010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) 12:22:11 executing program 2: r0 = gettid() sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x135}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:22:11 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) 12:22:12 executing program 1: r0 = gettid() sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x38}}, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, 0x0, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x135}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:22:12 executing program 1: r0 = gettid() sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x38}}, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, 0x0, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x135}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:22:12 executing program 0: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x9}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, [], 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) 12:22:12 executing program 1: r0 = gettid() sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x38}}, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, 0x0, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x135}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:22:12 executing program 1: r0 = gettid() sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x38}}, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, 0x0, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) dup(0xffffffffffffffff) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x135}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 1231.315929][T21888] loop3: p1 p2 p3 p4 [ 1231.320041][T21888] loop3: p1 start 10 is beyond EOD, truncated [ 1231.330248][T21888] loop3: p2 start 4294960153 is beyond EOD, truncated [ 1231.342971][T21888] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1231.355262][T21888] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:22:12 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e93119f6ffffff00000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:22:12 executing program 0: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x9}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, [], 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) 12:22:12 executing program 0: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x9}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, [], 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) [ 1231.474209][T21920] loop3: p1 p2 p3 p4 [ 1231.478352][T21920] loop3: p1 start 10 is beyond EOD, truncated [ 1231.484466][T21920] loop3: p2 start 4294964761 is beyond EOD, truncated [ 1231.491252][T21920] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1231.498088][T21920] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1231.506252][ T153] loop3: p1 p2 p3 p4 [ 1231.510285][ T153] loop3: p1 start 10 is beyond EOD, truncated [ 1231.516659][ T153] loop3: p2 start 4294964761 is beyond EOD, truncated [ 1231.523505][ T153] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1231.530258][ T153] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1231.542288][ T8432] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 1231.549911][T17814] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 1231.626030][T21920] loop3: p1 p2 p3 p4 [ 1231.630909][T21920] loop3: p1 start 10 is beyond EOD, truncated [ 1231.637444][T21920] loop3: p2 start 4294964761 is beyond EOD, truncated [ 1231.644377][T21920] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1231.651156][T21920] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1231.660469][ T153] loop3: p1 p2 p3 p4 [ 1231.664919][ T153] loop3: p1 start 10 is beyond EOD, truncated [ 1231.671031][ T153] loop3: p2 start 4294964761 is beyond EOD, truncated [ 1231.678357][ T153] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1231.685493][ T153] loop3: p4 size 3657465856 extends beyond EOD, truncated [ 1231.782999][ T8432] usb 5-1: Using ep0 maxpacket: 16 [ 1231.802286][T17814] usb 6-1: Using ep0 maxpacket: 8 [ 1231.902360][ T8432] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1231.915212][ T8432] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1231.924390][T17814] usb 6-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=78.22 [ 1231.933460][ T8432] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1231.941683][T17814] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1231.951592][ T8432] usb 5-1: config 0 descriptor?? [ 1231.957268][T17814] usb 6-1: config 0 descriptor?? [ 1231.992732][ T8432] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1232.193364][T17861] usb 5-1: USB disconnect, device number 64 [ 1232.442247][T17814] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1232.452202][T17814] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71 [ 1232.464148][T17814] asix: probe of 6-1:0.0 failed with error -71 [ 1232.470898][T17814] usb 6-1: USB disconnect, device number 51 [ 1232.752183][T17861] usb 5-1: new high-speed USB device number 65 using dummy_hcd 12:22:13 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xe5, 0xe7, 0xf9, 0x8, 0xb95, 0x172a, 0x7822, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x90, 0x71, 0x39}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000001300)={0x34, &(0x7f0000001040), 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1233.012181][T17861] usb 5-1: Using ep0 maxpacket: 32 [ 1233.132333][T17861] usb 5-1: config index 0 descriptor too short (expected 16420, got 36) [ 1233.140684][T17861] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1233.151581][T17861] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1233.161328][T17861] usb 5-1: New USB device found, idVendor=044d, idProduct=c31c, bcdDevice= 0.04 [ 1233.170364][T17861] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1233.178939][T17861] usb 5-1: config 0 descriptor?? [ 1233.202248][T21604] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 1233.222578][T17861] hub 5-1:0.0: USB hub found [ 1233.432208][T17861] hub 5-1:0.0: 1 port detected [ 1233.442282][T21604] usb 6-1: Using ep0 maxpacket: 8 [ 1233.562167][T21604] usb 6-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=78.22 [ 1233.571239][T21604] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1233.580818][T21604] usb 6-1: config 0 descriptor?? [ 1233.842147][T21604] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to read MAC address: 0 [ 1233.855771][T21604] asix 6-1:0.0 eth1: register 'asix' at usb-dummy_hcd.5-1, ASIX AX88172A USB 2.0 Ethernet, 2a:8d:0e:2a:82:4c [ 1234.043045][T17861] usb 6-1: USB disconnect, device number 52 [ 1234.049028][T17861] asix 6-1:0.0 eth1: unregister 'asix' usb-dummy_hcd.5-1, ASIX AX88172A USB 2.0 Ethernet [ 1234.082155][T21604] hub 5-1:0.0: activate --> -90 [ 1234.102235][T17861] ================================================================== [ 1234.110515][T17861] BUG: KASAN: use-after-free in ax88172a_unbind+0x6a/0xc0 [ 1234.117593][T17861] Read of size 8 at addr ffff8881daa5af00 by task kworker/0:2/17861 [ 1234.125533][T17861] [ 1234.127843][T17861] CPU: 0 PID: 17861 Comm: kworker/0:2 Not tainted 5.4.48-syzkaller-00551-gdaa2cef41540 #0 [ 1234.137699][T17861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1234.147738][T17861] Workqueue: usb_hub_wq hub_event [ 1234.152731][T17861] Call Trace: [ 1234.156033][T17861] dump_stack+0x14a/0x1ce [ 1234.160359][T17861] ? show_regs_print_info+0x12/0x12 [ 1234.165524][T17861] ? printk+0xd2/0x114 [ 1234.169578][T17861] print_address_description+0x93/0x620 [ 1234.175097][T17861] ? _raw_spin_lock+0x170/0x170 [ 1234.179917][T17861] __kasan_report+0x16d/0x1e0 [ 1234.184565][T17861] ? ax88172a_unbind+0x6a/0xc0 [ 1234.189313][T17861] kasan_report+0x36/0x60 [ 1234.193614][T17861] ax88172a_unbind+0x6a/0xc0 [ 1234.198172][T17861] ? ax88172a_bind+0x980/0x980 [ 1234.202902][T17861] usbnet_disconnect+0x14e/0x340 [ 1234.207807][T17861] usb_unbind_interface+0x1d8/0x850 [ 1234.212973][T17861] ? usb_driver_release_interface+0x1b0/0x1b0 [ 1234.219007][T17861] device_release_driver_internal+0x515/0x7b0 [ 1234.225059][T17861] bus_remove_device+0x2e7/0x350 [ 1234.229997][T17861] device_del+0x7bc/0x1200 [ 1234.234387][T17861] ? kill_device+0xc0/0xc0 [ 1234.238772][T17861] usb_disable_device+0x3fe/0xc90 [ 1234.243764][T17861] usb_disconnect+0x341/0x880 [ 1234.248422][T17861] hub_event+0x1c6c/0x4fa0 [ 1234.252809][T17861] ? led_work+0x530/0x530 [ 1234.257107][T17861] ? __ia32_sys_prctl+0xb0/0xc0 [ 1234.261924][T17861] ? _raw_spin_lock_irq+0xa2/0x180 [ 1234.267002][T17861] ? read_word_at_a_time+0xe/0x20 [ 1234.271997][T17861] ? strscpy+0xa6/0x260 [ 1234.276141][T17861] process_one_work+0x777/0xf90 [ 1234.280975][T17861] worker_thread+0xa8f/0x1430 [ 1234.282625][T17814] usb 5-1: USB disconnect, device number 65 [ 1234.285628][T17861] kthread+0x2df/0x300 [ 1234.285641][T17861] ? process_one_work+0xf90/0xf90 [ 1234.300567][T17861] ? kthread_destroy_worker+0x280/0x280 [ 1234.306098][T17861] ret_from_fork+0x1f/0x30 [ 1234.310503][T17861] [ 1234.312800][T17861] Allocated by task 21604: [ 1234.317207][T17861] __kasan_kmalloc+0x12c/0x1c0 [ 1234.321937][T17861] kmem_cache_alloc_trace+0xc3/0x280 [ 1234.327189][T17861] ax88172a_bind+0xc7/0x980 [ 1234.331663][T17861] usbnet_probe+0xa9f/0x2770 [ 1234.336243][T17861] usb_probe_interface+0x631/0xad0 [ 1234.341319][T17861] really_probe+0x764/0xf70 [ 1234.345801][T17861] driver_probe_device+0xe6/0x230 [ 1234.350791][T17861] bus_for_each_drv+0x17a/0x200 [ 1234.355605][T17861] __device_attach+0x27b/0x420 [ 1234.360335][T17861] bus_probe_device+0xbb/0x200 [ 1234.365065][T17861] device_add+0x13db/0x17c0 [ 1234.370075][T17861] usb_set_configuration+0x197f/0x1f00 [ 1234.375522][T17861] generic_probe+0x82/0x140 [ 1234.380039][T17861] really_probe+0x764/0xf70 [ 1234.384509][T17861] driver_probe_device+0xe6/0x230 [ 1234.389502][T17861] bus_for_each_drv+0x17a/0x200 [ 1234.394323][T17861] __device_attach+0x27b/0x420 [ 1234.399054][T17861] bus_probe_device+0xbb/0x200 [ 1234.403784][T17861] device_add+0x13db/0x17c0 [ 1234.408272][T17861] usb_new_device+0xda7/0x1710 [ 1234.413015][T17861] hub_event+0x2963/0x4fa0 [ 1234.417830][T17861] process_one_work+0x777/0xf90 [ 1234.422907][T17861] worker_thread+0xa8f/0x1430 [ 1234.427551][T17861] kthread+0x2df/0x300 [ 1234.431618][T17861] ret_from_fork+0x1f/0x30 [ 1234.435996][T17861] [ 1234.438295][T17861] Freed by task 21604: [ 1234.442347][T17861] __kasan_slab_free+0x181/0x230 [ 1234.447254][T17861] slab_free_freelist_hook+0xd0/0x150 [ 1234.452610][T17861] kfree+0x12b/0x600 [ 1234.456482][T17861] ax88172a_bind+0x844/0x980 [ 1234.461037][T17861] usbnet_probe+0xa9f/0x2770 [ 1234.465604][T17861] usb_probe_interface+0x631/0xad0 [ 1234.470707][T17861] really_probe+0x764/0xf70 [ 1234.475266][T17861] driver_probe_device+0xe6/0x230 [ 1234.480278][T17861] bus_for_each_drv+0x17a/0x200 [ 1234.485107][T17861] __device_attach+0x27b/0x420 [ 1234.489848][T17861] bus_probe_device+0xbb/0x200 [ 1234.494577][T17861] device_add+0x13db/0x17c0 [ 1234.499051][T17861] usb_set_configuration+0x197f/0x1f00 [ 1234.504497][T17861] generic_probe+0x82/0x140 [ 1234.508969][T17861] really_probe+0x764/0xf70 [ 1234.513442][T17861] driver_probe_device+0xe6/0x230 [ 1234.518438][T17861] bus_for_each_drv+0x17a/0x200 [ 1234.523386][T17861] __device_attach+0x27b/0x420 [ 1234.528166][T17861] bus_probe_device+0xbb/0x200 [ 1234.532902][T17861] device_add+0x13db/0x17c0 [ 1234.537375][T17861] usb_new_device+0xda7/0x1710 [ 1234.542106][T17861] hub_event+0x2963/0x4fa0 [ 1234.546490][T17861] process_one_work+0x777/0xf90 [ 1234.551308][T17861] worker_thread+0xa8f/0x1430 [ 1234.555950][T17861] kthread+0x2df/0x300 [ 1234.559985][T17861] ret_from_fork+0x1f/0x30 [ 1234.564366][T17861] [ 1234.566663][T17861] The buggy address belongs to the object at ffff8881daa5af00 [ 1234.566663][T17861] which belongs to the cache kmalloc-64 of size 64 [ 1234.580510][T17861] The buggy address is located 0 bytes inside of [ 1234.580510][T17861] 64-byte region [ffff8881daa5af00, ffff8881daa5af40) [ 1234.593495][T17861] The buggy address belongs to the page: [ 1234.599095][T17861] page:ffffea00076a9680 refcount:1 mapcount:0 mapping:ffff8881da803180 index:0x0 [ 1234.608165][T17861] flags: 0x8000000000000200(slab) [ 1234.613158][T17861] raw: 8000000000000200 ffffea0007122d00 0000000500000005 ffff8881da803180 [ 1234.621707][T17861] raw: 0000000000000000 0000000000200020 00000001ffffffff 0000000000000000 [ 1234.630263][T17861] page dumped because: kasan: bad access detected [ 1234.636654][T17861] [ 1234.639001][T17861] Memory state around the buggy address: [ 1234.644605][T17861] ffff8881daa5ae00: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 1234.652641][T17861] ffff8881daa5ae80: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 1234.660676][T17861] >ffff8881daa5af00: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 1234.668752][T17861] ^ [ 1234.672794][T17861] ffff8881daa5af80: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 1234.680824][T17861] ffff8881daa5b000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1234.688856][T17861] ================================================================== [ 1234.697025][T17861] Disabling lock debugging due to kernel taint [ 1234.703487][T21604] hub 5-1:0.0: hub_ext_port_status failed (err = -71) [ 1234.710347][T17861] asix 6-1:0.0 eth1 (unregistered): deregistering mdio bus r:udev_var_run_t:s0 [ 1234.719697][T17861] ------------[ cut here ]------------ [ 1234.725153][T17861] kernel BUG at drivers/net/phy/mdio_bus.c:456! [ 1234.731501][T17861] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 1234.737551][T17861] CPU: 0 PID: 17861 Comm: kworker/0:2 Tainted: G B 5.4.48-syzkaller-00551-gdaa2cef41540 #0 12:22:15 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000204d041cc304000000000109022440010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) [ 1234.748938][T17861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1234.758975][T17861] Workqueue: usb_hub_wq hub_event [ 1234.763990][T17861] RIP: 0010:mdiobus_unregister+0x1da/0x1e0 [ 1234.769764][T17861] Code: f4 fe e9 80 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 94 fe ff ff 4c 89 ff e8 d0 d7 f4 fe e9 87 fe ff ff e8 36 ac c6 fe <0f> 0b 0f 1f 40 00 41 57 41 56 41 55 41 54 53 49 89 ff 49 bc 00 00 [ 1234.789347][T17861] RSP: 0018:ffff8881d7bf7620 EFLAGS: 00010246 [ 1234.795406][T17861] RAX: ffffffff827b530a RBX: 00000000725f7261 RCX: 0000000000040000 [ 1234.803370][T17861] RDX: ffffc9000d3c7000 RSI: 000000000003ffff RDI: 0000000000040000 [ 1234.811326][T17861] RBP: 1ffff1103b54b5b3 R08: ffffffff827b5176 R09: ffffed103b705df0 [ 1234.819281][T17861] R10: ffffed103b705df0 R11: 0000000000000000 R12: dffffc0000000000 [ 1234.827228][T17861] R13: dffffc0000000000 R14: ffff8881daa5ad00 R15: ffff8881daa5ad98 [ 1234.835173][T17861] FS: 0000000000000000(0000) GS:ffff8881db800000(0000) knlGS:0000000000000000 [ 1234.844068][T17861] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1234.850649][T17861] CR2: 0000001b32223000 CR3: 000000019f5b3001 CR4: 00000000001606f0 [ 1234.858593][T17861] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1234.866533][T17861] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1234.874471][T17861] Call Trace: [ 1234.877739][T17861] ax88172a_unbind+0x99/0xc0 [ 1234.882306][T17861] ? ax88172a_bind+0x980/0x980 [ 1234.887036][T17861] usbnet_disconnect+0x14e/0x340 [ 1234.891958][T17861] usb_unbind_interface+0x1d8/0x850 [ 1234.897130][T17861] ? usb_driver_release_interface+0x1b0/0x1b0 [ 1234.903161][T17861] device_release_driver_internal+0x515/0x7b0 [ 1234.909207][T17861] bus_remove_device+0x2e7/0x350 [ 1234.914123][T17861] device_del+0x7bc/0x1200 [ 1234.918509][T17861] ? kill_device+0xc0/0xc0 [ 1234.922895][T17861] usb_disable_device+0x3fe/0xc90 [ 1234.927889][T17861] usb_disconnect+0x341/0x880 [ 1234.932535][T17861] hub_event+0x1c6c/0x4fa0 [ 1234.936927][T17861] ? led_work+0x530/0x530 [ 1234.941228][T17861] ? __ia32_sys_prctl+0xb0/0xc0 [ 1234.946051][T17861] ? _raw_spin_lock_irq+0xa2/0x180 [ 1234.951130][T17861] ? read_word_at_a_time+0xe/0x20 [ 1234.956122][T17861] ? strscpy+0xa6/0x260 [ 1234.960247][T17861] process_one_work+0x777/0xf90 [ 1234.965071][T17861] worker_thread+0xa8f/0x1430 [ 1234.969722][T17861] kthread+0x2df/0x300 [ 1234.973781][T17861] ? process_one_work+0xf90/0xf90 [ 1234.978771][T17861] ? kthread_destroy_worker+0x280/0x280 [ 1234.984292][T17861] ret_from_fork+0x1f/0x30 [ 1234.988695][T17861] Modules linked in: [ 1234.992868][T17861] ---[ end trace 69f6bcac2ed96c21 ]--- [ 1234.998326][T17861] RIP: 0010:mdiobus_unregister+0x1da/0x1e0 12:22:15 executing program 2: r0 = gettid() sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x135}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:22:15 executing program 1: r0 = gettid() sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x38}}, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, 0x0, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) dup(0xffffffffffffffff) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x135}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 12:22:15 executing program 0: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, [], 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x78) 12:22:15 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="0201a6ffffff0a000000ff45ac0000ffffff8200e93119fdffffff00000680ffffffa9000000e100e2ff877700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) 12:22:15 executing program 0: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, [], 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x78) 12:22:15 executing program 0: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, [], 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x78) [ 1235.004155][T17861] Code: f4 fe e9 80 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 94 fe ff ff 4c 89 ff e8 d0 d7 f4 fe e9 87 fe ff ff e8 36 ac c6 fe <0f> 0b 0f 1f 40 00 41 57 41 56 41 55 41 54 53 49 89 ff 49 bc 00 00 [ 1235.033415][T17861] RSP: 0018:ffff8881d7bf7620 EFLAGS: 00010246 [ 1235.042524][T17861] RAX: ffffffff827b530a RBX: 00000000725f7261 RCX: 0000000000040000 [ 1235.050544][T17861] RDX: ffffc9000d3c7000 RSI: 000000000003ffff RDI: 0000000000040000 [ 1235.059020][T17861] RBP: 1ffff1103b54b5b3 R08: ffffffff827b5176 R09: ffffed103b705df0 [ 1235.067324][T17861] R10: ffffed103b705df0 R11: 0000000000000000 R12: dffffc0000000000 [ 1235.075540][T17861] R13: dffffc0000000000 R14: ffff8881daa5ad00 R15: ffff8881daa5ad98 [ 1235.086690][T21965] loop3: p1 p2 p3 p4 [ 1235.088092][T17861] FS: 0000000000000000(0000) GS:ffff8881db800000(0000) knlGS:0000000000000000 [ 1235.090775][T21965] loop3: p1 start 10 is beyond EOD, truncated 12:22:15 executing program 0: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x9}}, 0x0, 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, [], 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x78) [ 1235.109719][T21965] loop3: p2 start 4294966553 is beyond EOD, truncated [ 1235.110580][T17861] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1235.120925][T21965] loop3: p3 start 4293001441 is beyond EOD, truncated [ 1235.123964][T17861] CR2: 000056329edf98d0 CR3: 00000001d04b6005 CR4: 00000000001606f0 [ 1235.130357][T21965] loop3: p4 size 3657465856 extends beyond EOD, truncated 12:22:15 executing program 0: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x9}}, 0x0, 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, [], 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x78) [ 1235.160514][T17861] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1235.171453][T17861] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1235.179611][T17861] Kernel panic - not syncing: Fatal exception [ 1235.186470][T17861] Kernel Offset: disabled [ 1235.191294][T17861] Rebooting in 86400 seconds..