ursive\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001400)={&(0x7f00000013c0)='ext4_es_find_extent_range_enter\x00'}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r1, 0xff, 0x0, 0x0, 0x0) syncfs(r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r2, &(0x7f0000000000), 0x20b000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000200)='illinois\x00', 0x9) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000000)=0x2805, 0x4) r4 = openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x444501, 0x85) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000280)={0x0, &(0x7f00000001c0)}, 0x10) close(0xffffffffffffffff) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e20, @loopback}, 0x10) sendfile(r3, r4, 0x0, 0x90000) recvmsg(r3, &(0x7f0000000580)={0x0, 0x41, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4084, 0xfffffe1f}], 0x6, 0x0, 0xfffffffffffffcc9}, 0x700) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, 0x0) 04:06:02 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x4c1e, 0xfffffffffffffffd) 04:06:02 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time_recursive\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001400)={&(0x7f00000013c0)='ext4_es_find_extent_range_enter\x00'}, 0x10) (async) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r1, 0xff, 0x0, 0x0, 0x0) (async, rerun: 64) syncfs(r1) (async, rerun: 64) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r2, &(0x7f0000000000), 0x20b000) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000200)='illinois\x00', 0x9) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000000)=0x2805, 0x4) r4 = openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x444501, 0x85) (async, rerun: 64) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000280)={0x0, &(0x7f00000001c0)}, 0x10) (async, rerun: 64) close(0xffffffffffffffff) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e20, @loopback}, 0x10) sendfile(r3, r4, 0x0, 0x90000) (async, rerun: 64) recvmsg(r3, &(0x7f0000000580)={0x0, 0x41, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4084, 0xfffffe1f}], 0x6, 0x0, 0xfffffffffffffcc9}, 0x700) (async, rerun: 64) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, 0x0) 04:06:02 executing program 2: syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd8}, "c35c045126f1e196c6c844f418f37ecc9cd1cb757ced5480a0f22d2c02a76fb8e323e296bba21941b574281a10abe0517641eb2caae96b6fbb804fbced2d2a4fd578558aa369b3d82c6df466e3ff13378406e3245eeb72213d8be2b44f86dd6938d3a564e371a1c6c8b7fc8bfacce86ee8b1fc527f12a38e9277962ab051d2bb9b97bce2fac4526af5ea4040eb830f327f39792200f147507b116d63b88ef88b8ba1b20de295bed65ddf6439102129e2a0d86399c01bd35fc5eb3221a65dfeecacb86b333b60f2d17b700c66b2b88f91c74fca10edc6f31c"}, 0xdc) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="02c8d00a00060005801aff0f000c27"], 0xf) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0x4}}, 0x9) syz_emit_vhci(&(0x7f00000001c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x9f}, "4f7202d41d6ce7daf945ef840ca5c83f3d1553f0cae5a07dce9cb4d7a66601bc84eec9cc3d0d463733d93f8279446fa26a2171387276f0c206c51a793294f02767181d642cae9d576eacc550df5525603f4d1acfe7641c06afe4fa5f52aedb4f4080297eef82ca6c40a53e4c1e311493a349233efbdd29e01863f3831d0ab1b9dc1905419e47f480017b5213fdff8485798ab88b0393cd157d57306f0a9afd"}, 0xa3) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd8}, "c35c045126f1e196c6c844f418f37ecc9cd1cb757ced5480a0f22d2c02a76fb8e323e296bba21941b574281a10abe0517641eb2caae96b6fbb804fbced2d2a4fd578558aa369b3d82c6df466e3ff13378406e3245eeb72213d8be2b44f86dd6938d3a564e371a1c6c8b7fc8bfacce86ee8b1fc527f12a38e9277962ab051d2bb9b97bce2fac4526af5ea4040eb830f327f39792200f147507b116d63b88ef88b8ba1b20de295bed65ddf6439102129e2a0d86399c01bd35fc5eb3221a65dfeecacb86b333b60f2d17b700c66b2b88f91c74fca10edc6f31c"}, 0xdc) (async) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="02c8d00a00060005801aff0f000c27"], 0xf) (async) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0x4}}, 0x9) (async) syz_emit_vhci(&(0x7f00000001c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x9f}, "4f7202d41d6ce7daf945ef840ca5c83f3d1553f0cae5a07dce9cb4d7a66601bc84eec9cc3d0d463733d93f8279446fa26a2171387276f0c206c51a793294f02767181d642cae9d576eacc550df5525603f4d1acfe7641c06afe4fa5f52aedb4f4080297eef82ca6c40a53e4c1e311493a349233efbdd29e01863f3831d0ab1b9dc1905419e47f480017b5213fdff8485798ab88b0393cd157d57306f0a9afd"}, 0xa3) (async) [ 565.103694][ T27] kauditd_printk_skb: 1 callbacks suppressed [ 565.103710][ T27] audit: type=1800 audit(1664078762.543:252): pid=11020 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=".pending_reads" dev="sda1" ino=1181 res=0 errno=0 [ 565.177052][ T27] audit: type=1800 audit(1664078762.543:253): pid=11017 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=".pending_reads" dev="sda1" ino=1181 res=0 errno=0 [ 565.232777][ T3779] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 565.322909][ T15] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 565.452820][ T3779] usb 5-1: device descriptor read/64, error 18 [ 565.572940][ T15] usb 2-1: Using ep0 maxpacket: 16 [ 565.702883][ T15] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 565.732809][ T3779] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 565.893177][ T15] usb 2-1: New USB device found, idVendor=15c2, idProduct=0040, bcdDevice=80.f3 [ 565.902278][ T15] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.910691][ T15] usb 2-1: Product: syz [ 565.915029][ T15] usb 2-1: Manufacturer: syz [ 565.919836][ T15] usb 2-1: SerialNumber: syz [ 565.932769][ T15] usb 2-1: config 0 descriptor?? [ 565.963065][ T3779] usb 5-1: device descriptor read/64, error 18 [ 565.995743][ T15] input: iMON Panel, Knob and Mouse(15c2:0040) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input169 [ 566.084220][ T3779] usb usb5-port1: attempt power cycle [ 566.323383][ T15] rc_core: IR keymap rc-imon-pad not found [ 566.329247][ T15] Registered IR keymap rc-empty [ 566.339102][ T15] imon 2-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 566.349660][ T15] imon 2-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 566.417834][ T4680] device hsr_slave_0 left promiscuous mode [ 566.425725][ T4680] device hsr_slave_1 left promiscuous mode [ 566.432286][ T4680] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 566.440040][ T4680] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 566.447973][ T15] rc rc0: iMON Remote (15c2:0040) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 566.460454][ T15] input: iMON Remote (15c2:0040) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input170 [ 566.474562][ T4680] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 566.481965][ T4680] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 566.495983][ T15] imon 2-1:0.0: iMON device (15c2:0040, intf0) on usb<2:54> initialized [ 566.498182][ T4680] device bridge_slave_1 left promiscuous mode [ 566.519140][ T4680] bridge0: port 2(bridge_slave_1) entered disabled state [ 566.532935][ T3779] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 566.557516][ T4680] device bridge_slave_0 left promiscuous mode [ 566.571918][ T4680] bridge0: port 1(bridge_slave_0) entered disabled state [ 566.631374][T11013] imon:vfd_write: invalid payload size [ 566.640634][ T4680] device veth1_macvtap left promiscuous mode [ 566.641183][ T23] usb 2-1: USB disconnect, device number 54 [ 566.647025][ C0] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 566.665359][ T4680] device veth0_macvtap left promiscuous mode [ 566.671593][ T4680] device veth1_vlan left promiscuous mode [ 566.679318][ T4680] device veth0_vlan left promiscuous mode [ 566.752816][ T3779] usb 5-1: device descriptor read/8, error -61 [ 566.868379][ T4680] team0 (unregistering): Port device team_slave_1 removed [ 566.883837][ T4680] team0 (unregistering): Port device team_slave_0 removed [ 566.896325][ T4680] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 566.913689][ T4680] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 566.977119][ T4680] bond0 (unregistering): Released all slaves [ 567.032801][ T3779] usb 5-1: new high-speed USB device number 24 using dummy_hcd 04:06:04 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time_recursive\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001400)={&(0x7f00000013c0)='ext4_es_find_extent_range_enter\x00'}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r1, 0xff, 0x0, 0x0, 0x0) syncfs(r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r2, &(0x7f0000000000), 0x20b000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000200)='illinois\x00', 0x9) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000000)=0x2805, 0x4) r4 = openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x444501, 0x85) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000280)={0x0, &(0x7f00000001c0)}, 0x10) close(0xffffffffffffffff) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e20, @loopback}, 0x10) sendfile(r3, r4, 0x0, 0x90000) recvmsg(r3, &(0x7f0000000580)={0x0, 0x41, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4084, 0xfffffe1f}], 0x6, 0x0, 0xfffffffffffffcc9}, 0x700) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time_recursive\x00', 0x26e1, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001400)={&(0x7f00000013c0)='ext4_es_find_extent_range_enter\x00'}, 0x10) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) getsockopt(r1, 0xff, 0x0, 0x0, 0x0) (async) syncfs(r1) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async) write$cgroup_type(r2, &(0x7f0000000000), 0x20b000) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000200)='illinois\x00', 0x9) (async) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10) (async) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000000)=0x2805, 0x4) (async) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x444501, 0x85) (async) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000280)={0x0, &(0x7f00000001c0)}, 0x10) (async) close(0xffffffffffffffff) (async) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e20, @loopback}, 0x10) (async) sendfile(r3, r4, 0x0, 0x90000) (async) recvmsg(r3, &(0x7f0000000580)={0x0, 0x41, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4084, 0xfffffe1f}], 0x6, 0x0, 0xfffffffffffffcc9}, 0x700) (async) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, 0x0) (async) 04:06:04 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x4c21, 0xfffffffffffffffd) 04:06:04 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e04002d040045d6c14f6b18eb71708c4aaa3efa3f3b"], 0x7) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x7f, 0x2}, {0x4}}}}, 0xf) 04:06:04 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000800000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='sys_enter\x00', r0}, 0x10) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) listxattr(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) r2 = openat2(r1, &(0x7f0000000100)='./file1\x00', &(0x7f0000000180)={0x2000, 0x8, 0x18}, 0x18) r3 = syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="10000000000001000100050000000000ffffff7f200000005a4d", 0x1a, 0x400}, {&(0x7f0000000440)="ff00feffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff00ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff03f0ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffe1ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed41034844d6de4005", 0x809, 0x800}, {0x0, 0x0, 0x1400}], 0x0, &(0x7f0000000500)=ANY=[], 0x0) symlinkat(&(0x7f0000002940)='./file0\x00', r3, &(0x7f0000001900)='./file1\x00') unlink(&(0x7f0000000080)='./file0\x00') close_range(r2, r3, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000280)={{0xfc, 0x6}, 0x1, 0x4, 0xec, {0x9, 0x8}, 0xc1, 0x8}) 04:06:04 executing program 1: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000007c0)=ANY=[@ANYBLOB="1201000079201010c2154000f3800102030109021b0001000000000904000001e104550009058b0b40"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x7a000000) [ 567.230447][T11040] loop3: detected capacity change from 0 to 20 [ 567.252900][ T3779] usb 5-1: device descriptor read/8, error -61 [ 567.278003][ T41] kworker/u4:2: attempt to access beyond end of device [ 567.278003][ T41] loop3: rw=1, sector=44, nr_sectors = 2 limit=20 [ 567.319109][ T41] Buffer I/O error on dev loop3, logical block 22, lost async page write [ 567.328413][ T41] kworker/u4:2: attempt to access beyond end of device [ 567.328413][ T41] loop3: rw=1, sector=46, nr_sectors = 2 limit=20 [ 567.342336][ T41] Buffer I/O error on dev loop3, logical block 23, lost async page write [ 567.393138][ T3779] usb usb5-port1: unable to enumerate USB device [ 567.522859][ T15] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 567.773418][ T15] usb 2-1: Using ep0 maxpacket: 16 [ 567.902744][ T15] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 04:06:05 executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000007c0)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 04:06:05 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x4c22, 0xfffffffffffffffd) 04:06:05 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e04002d040045d6c14f6b18eb71708c4aaa3efa3f3b"], 0x7) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x7f, 0x2}, {0x4}}}}, 0xf) 04:06:05 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000800000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='sys_enter\x00', r0}, 0x10) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) listxattr(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) r2 = openat2(r1, &(0x7f0000000100)='./file1\x00', &(0x7f0000000180)={0x2000, 0x8, 0x18}, 0x18) r3 = syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="10000000000001000100050000000000ffffff7f200000005a4d", 0x1a, 0x400}, {&(0x7f0000000440)="ff00feffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff00ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff03f0ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffe1ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed41034844d6de4005", 0x809, 0x800}, {0x0, 0x0, 0x1400}], 0x0, &(0x7f0000000500)=ANY=[], 0x0) symlinkat(&(0x7f0000002940)='./file0\x00', r3, &(0x7f0000001900)='./file1\x00') unlink(&(0x7f0000000080)='./file0\x00') (async) close_range(r2, r3, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000280)={{0xfc, 0x6}, 0x1, 0x4, 0xec, {0x9, 0x8}, 0xc1, 0x8}) 04:06:05 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time_recursive\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001400)={&(0x7f00000013c0)='ext4_es_find_extent_range_enter\x00'}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r1, 0xff, 0x0, 0x0, 0x0) syncfs(r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r2, &(0x7f0000000000), 0x20b000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000200)='illinois\x00', 0x9) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000000)=0x2805, 0x4) r4 = openat(0xffffffffffffffff, &(0x7f00000002c0)='/proc/self/exe\x00', 0x200, 0x4b) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000280)={0x0, &(0x7f00000001c0)}, 0x10) close(0xffffffffffffffff) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e20, @loopback}, 0x10) sendfile(r3, r4, 0x0, 0x90000) recvmsg(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)}, 0x10700) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, 0x0) 04:06:05 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time_recursive\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001400)={&(0x7f00000013c0)='ext4_es_find_extent_range_enter\x00'}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r1, 0xff, 0x0, 0x0, 0x0) (async) syncfs(r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r2, &(0x7f0000000000), 0x20b000) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000200)='illinois\x00', 0x9) (async, rerun: 32) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10) (async, rerun: 32) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000000)=0x2805, 0x4) (async) r4 = openat(0xffffffffffffffff, &(0x7f00000002c0)='/proc/self/exe\x00', 0x200, 0x4b) (async) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000280)={0x0, &(0x7f00000001c0)}, 0x10) close(0xffffffffffffffff) (async) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e20, @loopback}, 0x10) (async) sendfile(r3, r4, 0x0, 0x90000) recvmsg(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)}, 0x10700) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, 0x0) 04:06:05 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e04002d040045d6c14f6b18eb71708c4aaa3efa3f3b"], 0x7) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x7f, 0x2}, {0x4}}}}, 0xf) 04:06:05 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x4c23, 0xfffffffffffffffd) [ 568.019214][T11056] loop3: detected capacity change from 0 to 20 04:06:05 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000800000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='sys_enter\x00', r0}, 0x10) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) listxattr(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) r2 = openat2(r1, &(0x7f0000000100)='./file1\x00', &(0x7f0000000180)={0x2000, 0x8, 0x18}, 0x18) r3 = syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="10000000000001000100050000000000ffffff7f200000005a4d", 0x1a, 0x400}, {&(0x7f0000000440)="ff00feffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff00ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff03f0ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffe1ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed41034844d6de4005", 0x809, 0x800}, {0x0, 0x0, 0x1400}], 0x0, &(0x7f0000000500)=ANY=[], 0x0) symlinkat(&(0x7f0000002940)='./file0\x00', r3, &(0x7f0000001900)='./file1\x00') unlink(&(0x7f0000000080)='./file0\x00') close_range(r2, r3, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000280)={{0xfc, 0x6}, 0x1, 0x4, 0xec, {0x9, 0x8}, 0xc1, 0x8}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000800000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='sys_enter\x00', r0}, 0x10) (async) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) listxattr(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) (async) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) (async) openat2(r1, &(0x7f0000000100)='./file1\x00', &(0x7f0000000180)={0x2000, 0x8, 0x18}, 0x18) (async) syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="10000000000001000100050000000000ffffff7f200000005a4d", 0x1a, 0x400}, {&(0x7f0000000440)="ff00feffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff00ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff03f0ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffe1ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed41034844d6de4005", 0x809, 0x800}, {0x0, 0x0, 0x1400}], 0x0, &(0x7f0000000500)=ANY=[], 0x0) (async) symlinkat(&(0x7f0000002940)='./file0\x00', r3, &(0x7f0000001900)='./file1\x00') (async) unlink(&(0x7f0000000080)='./file0\x00') (async) close_range(r2, r3, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000280)={{0xfc, 0x6}, 0x1, 0x4, 0xec, {0x9, 0x8}, 0xc1, 0x8}) (async) 04:06:05 executing program 2: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="2c0400"], 0x7) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040504b3c900ff666ddb3900776045581678b7b05dd9e6f543de852dd1f4347f08f8c408b379609907008da432a938"], 0x7) syz_emit_vhci(&(0x7f00000000c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa6}, "27a8bb7126b42d8864cf0c5d4af7445b0b80c118f5bed464d61466e1ab240d3973a7a3001d31a7ec900f4b63494024dd4cc31f9c909caa473359efbaa4c10c39bcf5c45af6d6483ad6a4afd914bdcf699b27adf33a7fca7a1249b953c79de1e0353e36fbce165ce36d148b5a2ee619334510d05b93783a47f5451ec9ae599da60046fae2851e3ea7db58b63ad9cf38f3c50efc6c524565a670efefc102bc3e5457fe913a9fa5"}, 0xaa) 04:06:05 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x4c24, 0xfffffffffffffffd) [ 568.104837][ T15] usb 2-1: New USB device found, idVendor=15c2, idProduct=0040, bcdDevice=80.f3 [ 568.124332][ T15] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.153306][ T15] usb 2-1: Product: syz [ 568.167772][ T15] usb 2-1: Manufacturer: syz [ 568.182586][ T15] usb 2-1: SerialNumber: syz [ 568.202174][ T41] kworker/u4:2: attempt to access beyond end of device [ 568.202174][ T41] loop3: rw=1, sector=44, nr_sectors = 2 limit=20 [ 568.204737][ T15] usb 2-1: config 0 descriptor?? [ 568.247374][ T41] Buffer I/O error on dev loop3, logical block 22, lost async page write [ 568.266479][ T41] kworker/u4:2: attempt to access beyond end of device [ 568.266479][ T41] loop3: rw=1, sector=46, nr_sectors = 2 limit=20 [ 568.285692][ T41] Buffer I/O error on dev loop3, logical block 23, lost async page write [ 568.326635][ T15] input: iMON Panel, Knob and Mouse(15c2:0040) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input171 [ 568.356956][T11078] loop3: detected capacity change from 0 to 20 [ 568.371730][T10612] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 568.443797][ T9] kworker/u4:0: attempt to access beyond end of device [ 568.443797][ T9] loop3: rw=1, sector=44, nr_sectors = 2 limit=20 [ 568.457268][ T3779] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 568.465261][ T9] Buffer I/O error on dev loop3, logical block 22, lost async page write [ 568.474314][ T9] kworker/u4:0: attempt to access beyond end of device [ 568.474314][ T9] loop3: rw=1, sector=46, nr_sectors = 2 limit=20 [ 568.487821][ T9] Buffer I/O error on dev loop3, logical block 23, lost async page write [ 568.613059][ T15] rc_core: IR keymap rc-imon-pad not found [ 568.618935][ T15] Registered IR keymap rc-empty [ 568.624339][ T15] imon 2-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 568.634614][ T15] imon 2-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 568.672751][ T3779] usb 5-1: device descriptor read/64, error 18 [ 568.774763][ T15] rc rc0: iMON Remote (15c2:0040) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 568.786283][ T15] input: iMON Remote (15c2:0040) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input172 [ 568.801757][ T15] imon 2-1:0.0: iMON device (15c2:0040, intf0) on usb<2:55> initialized [ 568.953405][ T3779] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 568.955949][T11047] imon:vfd_write: invalid payload size [ 568.971975][ T3778] usb 2-1: USB disconnect, device number 55 [ 568.978235][ C0] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 569.162791][ T3779] usb 5-1: device descriptor read/64, error 18 [ 569.286973][ T3779] usb usb5-port1: attempt power cycle 04:06:06 executing program 2: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="2c0400"], 0x7) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040504b3c900ff666ddb3900776045581678b7b05dd9e6f543de852dd1f4347f08f8c408b379609907008da432a938"], 0x7) syz_emit_vhci(&(0x7f00000000c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa6}, "27a8bb7126b42d8864cf0c5d4af7445b0b80c118f5bed464d61466e1ab240d3973a7a3001d31a7ec900f4b63494024dd4cc31f9c909caa473359efbaa4c10c39bcf5c45af6d6483ad6a4afd914bdcf699b27adf33a7fca7a1249b953c79de1e0353e36fbce165ce36d148b5a2ee619334510d05b93783a47f5451ec9ae599da60046fae2851e3ea7db58b63ad9cf38f3c50efc6c524565a670efefc102bc3e5457fe913a9fa5"}, 0xaa) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="2c0400"], 0x7) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) (async) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040504b3c900ff666ddb3900776045581678b7b05dd9e6f543de852dd1f4347f08f8c408b379609907008da432a938"], 0x7) (async) syz_emit_vhci(&(0x7f00000000c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa6}, "27a8bb7126b42d8864cf0c5d4af7445b0b80c118f5bed464d61466e1ab240d3973a7a3001d31a7ec900f4b63494024dd4cc31f9c909caa473359efbaa4c10c39bcf5c45af6d6483ad6a4afd914bdcf699b27adf33a7fca7a1249b953c79de1e0353e36fbce165ce36d148b5a2ee619334510d05b93783a47f5451ec9ae599da60046fae2851e3ea7db58b63ad9cf38f3c50efc6c524565a670efefc102bc3e5457fe913a9fa5"}, 0xaa) (async) [ 569.712791][ T3779] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 569.903008][ T3779] usb 5-1: device descriptor read/8, error -61 [ 570.182930][ T3779] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 570.382872][ T3779] usb 5-1: device descriptor read/8, error -61 [ 570.503944][ T3779] usb usb5-port1: unable to enumerate USB device 04:06:08 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x4c25, 0xfffffffffffffffd) 04:06:08 executing program 3: r0 = syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x849, 0x3, &(0x7f0000000200)=[{&(0x7f0000000080)="100000000000010005000000b8078a91ff7f200000005a4d5c628de26174990de8a9d910a3c0747aabad47615b7f4cf16656641f31e22a208060b7c06fb72c8d0322dd65857c36ba1424f1ada433f8b0a1d13a86075ca3044cb8e7afde9c74dd45ec4f5698fb95f9afb679637af86cf76d538c4fa5a47ff78d92a36c00000000000000003e407b96088fd121a971a94d7740604f9e3137b88709d946a2c38b7bed4f0f3091e358d564761135b8bccd223b6ff7e3bc590428c30d0d269ab00000", 0xc0, 0x400}, {&(0x7f0000000440)="ff00feffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff00fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffeffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff7bb433c8ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff03f0ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffeaddfcf3ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffe1ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed41034844d6de4005000000000000000000", 0x809, 0x800}, {0x0, 0x0, 0x1400}], 0x0, &(0x7f0000000500)=ANY=[], 0x0) symlinkat(&(0x7f0000002940)='./file0\x00', r0, &(0x7f0000001900)='./file1\x00') 04:06:08 executing program 1: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000007c0)=ANY=[@ANYBLOB="1201000079201010c2154000f3800102030109021b0001000000000904000001e104550009058b0b40"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0xffffe000) 04:06:08 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time_recursive\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001400)={&(0x7f00000013c0)='ext4_es_find_extent_range_enter\x00'}, 0x10) (async) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r1, 0xff, 0x0, 0x0, 0x0) (async) syncfs(r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r2, &(0x7f0000000000), 0x20b000) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000200)='illinois\x00', 0x9) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10) (async) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000000)=0x2805, 0x4) (async) r4 = openat(0xffffffffffffffff, &(0x7f00000002c0)='/proc/self/exe\x00', 0x200, 0x4b) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000280)={0x0, &(0x7f00000001c0)}, 0x10) (async) close(0xffffffffffffffff) (async) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e20, @loopback}, 0x10) (async) sendfile(r3, r4, 0x0, 0x90000) recvmsg(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)}, 0x10700) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, 0x0) 04:06:08 executing program 2: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="2c0400"], 0x7) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) (async) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040504b3c900ff666ddb3900776045581678b7b05dd9e6f543de852dd1f4347f08f8c408b379609907008da432a938"], 0x7) (async) syz_emit_vhci(&(0x7f00000000c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa6}, "27a8bb7126b42d8864cf0c5d4af7445b0b80c118f5bed464d61466e1ab240d3973a7a3001d31a7ec900f4b63494024dd4cc31f9c909caa473359efbaa4c10c39bcf5c45af6d6483ad6a4afd914bdcf699b27adf33a7fca7a1249b953c79de1e0353e36fbce165ce36d148b5a2ee619334510d05b93783a47f5451ec9ae599da60046fae2851e3ea7db58b63ad9cf38f3c50efc6c524565a670efefc102bc3e5457fe913a9fa5"}, 0xaa) 04:06:08 executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000007c0)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 04:06:08 executing program 2: sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140), 0x3) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="d4f01bd063ffab77a00c627a1581a82fa4512415106ff0e8be87fb5752a6fffbe2b4"], 0x7) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x2, 0x2, 0x3f}, @l2cap_cid_signaling={{0x3b}, [@l2cap_conf_req={{0x4, 0x0, 0x26}, {0xa240, 0x947a, [@l2cap_conf_mtu={0x1, 0x2, 0x7}, @l2cap_conf_rfc={0x4, 0x9, {0x3, 0x6, 0x3, 0xfff, 0x2, 0x20}}, @l2cap_conf_flushto={0x2, 0x2, 0x401}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x5, 0x3f, 0x9, 0xb62d}}, @l2cap_conf_mtu={0x1, 0x2, 0x4}]}}, @l2cap_create_chan_req={{0xc, 0x6, 0x5}, {0x0, 0x603, 0x7}}, @l2cap_conn_req={{0x2, 0x1, 0x4}, {0x0, 0x1}}]}}, 0x44) 04:06:08 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x4c26, 0xfffffffffffffffd) 04:06:08 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time_recursive\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001400)={&(0x7f00000013c0)='ext4_es_find_extent_range_enter\x00'}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r1, 0xff, 0x0, 0x0, 0x0) syncfs(r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r2, &(0x7f0000000000), 0x20b000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000200)='illinois\x00', 0x9) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000000)=0x2805, 0x4) openat(r0, &(0x7f00000002c0)='/proc/self/exe\x00', 0x200000, 0x109) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000280)={0x0, &(0x7f00000001c0)}, 0x10) close(0xffffffffffffffff) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e20, @loopback}, 0x10) recvmsg(r3, &(0x7f0000000580)={0x0, 0x41, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4084, 0xfffffe1f}], 0x6, 0x0, 0xfffffffffffffcc9}, 0x700) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(r4, 0x40309410, 0x0) [ 571.074931][T11096] loop3: detected capacity change from 0 to 20 [ 571.105928][T11096] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop3. 04:06:08 executing program 2: sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140), 0x3) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="d4f01bd063ffab77a00c627a1581a82fa4512415106ff0e8be87fb5752a6fffbe2b4"], 0x7) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) (async) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x2, 0x2, 0x3f}, @l2cap_cid_signaling={{0x3b}, [@l2cap_conf_req={{0x4, 0x0, 0x26}, {0xa240, 0x947a, [@l2cap_conf_mtu={0x1, 0x2, 0x7}, @l2cap_conf_rfc={0x4, 0x9, {0x3, 0x6, 0x3, 0xfff, 0x2, 0x20}}, @l2cap_conf_flushto={0x2, 0x2, 0x401}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x5, 0x3f, 0x9, 0xb62d}}, @l2cap_conf_mtu={0x1, 0x2, 0x4}]}}, @l2cap_create_chan_req={{0xc, 0x6, 0x5}, {0x0, 0x603, 0x7}}, @l2cap_conn_req={{0x2, 0x1, 0x4}, {0x0, 0x1}}]}}, 0x44) 04:06:08 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x4c27, 0xfffffffffffffffd) 04:06:08 executing program 3: r0 = syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x849, 0x3, &(0x7f0000000200)=[{&(0x7f0000000080)="100000000000010005000000b8078a91ff7f200000005a4d5c628de26174990de8a9d910a3c0747aabad47615b7f4cf16656641f31e22a208060b7c06fb72c8d0322dd65857c36ba1424f1ada433f8b0a1d13a86075ca3044cb8e7afde9c74dd45ec4f5698fb95f9afb679637af86cf76d538c4fa5a47ff78d92a36c00000000000000003e407b96088fd121a971a94d7740604f9e3137b88709d946a2c38b7bed4f0f3091e358d564761135b8bccd223b6ff7e3bc590428c30d0d269ab00000", 0xc0, 0x400}, {&(0x7f0000000440)="ff00feffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff00fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffeffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff7bb433c8ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff03f0ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffeaddfcf3ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffe1ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed41034844d6de4005000000000000000000", 0x809, 0x800}, {0x0, 0x0, 0x1400}], 0x0, &(0x7f0000000500)=ANY=[], 0x0) symlinkat(&(0x7f0000002940)='./file0\x00', r0, &(0x7f0000001900)='./file1\x00') 04:06:08 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x4c28, 0xfffffffffffffffd) [ 571.287855][T11122] loop3: detected capacity change from 0 to 20 [ 571.298455][ T9814] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 571.342144][T11122] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop3. [ 571.373681][ T142] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 571.502793][ T3778] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 571.652826][ T142] usb 2-1: Using ep0 maxpacket: 16 [ 571.702753][ T3778] usb 5-1: device descriptor read/64, error 18 [ 571.792927][ T142] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 571.972861][ T3778] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 571.993026][ T142] usb 2-1: New USB device found, idVendor=15c2, idProduct=0040, bcdDevice=80.f3 [ 572.009504][ T142] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.017558][ T142] usb 2-1: Product: syz [ 572.021728][ T142] usb 2-1: Manufacturer: syz [ 572.030237][ T142] usb 2-1: SerialNumber: syz [ 572.037600][ T142] usb 2-1: config 0 descriptor?? [ 572.095373][ T142] input: iMON Panel, Knob and Mouse(15c2:0040) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input173 [ 572.162748][ T3778] usb 5-1: device descriptor read/64, error 18 [ 572.286435][ T3778] usb usb5-port1: attempt power cycle [ 572.404120][ T142] rc_core: IR keymap rc-imon-pad not found [ 572.409985][ T142] Registered IR keymap rc-empty [ 572.414953][ T142] imon 2-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 572.425077][ T142] imon 2-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 572.563515][ T142] rc rc0: iMON Remote (15c2:0040) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 572.574681][ T142] input: iMON Remote (15c2:0040) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input174 [ 572.587523][ T142] imon 2-1:0.0: iMON device (15c2:0040, intf0) on usb<2:56> initialized [ 572.692730][ T3778] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 572.740083][T11100] imon:vfd_write: invalid payload size [ 572.750101][ T3691] usb 2-1: USB disconnect, device number 56 [ 572.756257][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 572.862914][ T3778] usb 5-1: device descriptor read/8, error -61 [ 573.132728][ T3778] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 573.303317][ T3778] usb 5-1: device descriptor read/8, error -61 [ 573.424090][ T3778] usb usb5-port1: unable to enumerate USB device 04:06:11 executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 04:06:11 executing program 2: sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140), 0x3) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="d4f01bd063ffab77a00c627a1581a82fa4512415106ff0e8be87fb5752a6fffbe2b4"], 0x7) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) (async, rerun: 32) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) (async, rerun: 32) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x2, 0x2, 0x3f}, @l2cap_cid_signaling={{0x3b}, [@l2cap_conf_req={{0x4, 0x0, 0x26}, {0xa240, 0x947a, [@l2cap_conf_mtu={0x1, 0x2, 0x7}, @l2cap_conf_rfc={0x4, 0x9, {0x3, 0x6, 0x3, 0xfff, 0x2, 0x20}}, @l2cap_conf_flushto={0x2, 0x2, 0x401}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x5, 0x3f, 0x9, 0xb62d}}, @l2cap_conf_mtu={0x1, 0x2, 0x4}]}}, @l2cap_create_chan_req={{0xc, 0x6, 0x5}, {0x0, 0x603, 0x7}}, @l2cap_conn_req={{0x2, 0x1, 0x4}, {0x0, 0x1}}]}}, 0x44) 04:06:11 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time_recursive\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001400)={&(0x7f00000013c0)='ext4_es_find_extent_range_enter\x00'}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r1, 0xff, 0x0, 0x0, 0x0) syncfs(r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r2, &(0x7f0000000000), 0x20b000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000200)='illinois\x00', 0x9) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000000)=0x2805, 0x4) openat(r0, &(0x7f00000002c0)='/proc/self/exe\x00', 0x200000, 0x109) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000280)={0x0, &(0x7f00000001c0)}, 0x10) close(0xffffffffffffffff) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e20, @loopback}, 0x10) recvmsg(r3, &(0x7f0000000580)={0x0, 0x41, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4084, 0xfffffe1f}], 0x6, 0x0, 0xfffffffffffffcc9}, 0x700) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(r4, 0x40309410, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time_recursive\x00', 0x26e1, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001400)={&(0x7f00000013c0)='ext4_es_find_extent_range_enter\x00'}, 0x10) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) getsockopt(r1, 0xff, 0x0, 0x0, 0x0) (async) syncfs(r1) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async) write$cgroup_type(r2, &(0x7f0000000000), 0x20b000) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000200)='illinois\x00', 0x9) (async) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10) (async) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000000)=0x2805, 0x4) (async) openat(r0, &(0x7f00000002c0)='/proc/self/exe\x00', 0x200000, 0x109) (async) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000280)={0x0, &(0x7f00000001c0)}, 0x10) (async) close(0xffffffffffffffff) (async) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e20, @loopback}, 0x10) (async) recvmsg(r3, &(0x7f0000000580)={0x0, 0x41, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4084, 0xfffffe1f}], 0x6, 0x0, 0xfffffffffffffcc9}, 0x700) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) (async) ioctl$BTRFS_IOC_DEFRAG_RANGE(r4, 0x40309410, 0x0) (async) 04:06:11 executing program 3: r0 = syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x849, 0x3, &(0x7f0000000200)=[{&(0x7f0000000080)="100000000000010005000000b8078a91ff7f200000005a4d5c628de26174990de8a9d910a3c0747aabad47615b7f4cf16656641f31e22a208060b7c06fb72c8d0322dd65857c36ba1424f1ada433f8b0a1d13a86075ca3044cb8e7afde9c74dd45ec4f5698fb95f9afb679637af86cf76d538c4fa5a47ff78d92a36c00000000000000003e407b96088fd121a971a94d7740604f9e3137b88709d946a2c38b7bed4f0f3091e358d564761135b8bccd223b6ff7e3bc590428c30d0d269ab00000", 0xc0, 0x400}, {&(0x7f0000000440)="ff00feffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff00fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffeffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff7bb433c8ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff03f0ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffeaddfcf3ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffe1ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed41034844d6de4005000000000000000000", 0x809, 0x800}, {0x0, 0x0, 0x1400}], 0x0, &(0x7f0000000500)=ANY=[], 0x0) symlinkat(&(0x7f0000002940)='./file0\x00', r0, &(0x7f0000001900)='./file1\x00') 04:06:11 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x4c29, 0xfffffffffffffffd) 04:06:11 executing program 1: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000007c0)=ANY=[@ANYBLOB="1201000079201010c2154000f3800102030109021b0001000000000904000001e104550009058b0b40"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x7ffffffff000) 04:06:11 executing program 2: pkey_alloc(0x0, 0x1) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_USER_CONFIRM_NEG_REPLY}}, 0x7) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) 04:06:11 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x4c2a, 0xfffffffffffffffd) [ 574.149438][T11136] loop3: detected capacity change from 0 to 20 04:06:11 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time_recursive\x00', 0x26e1, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001400)={&(0x7f00000013c0)='ext4_es_find_extent_range_enter\x00'}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r1, 0xff, 0x0, 0x0, 0x0) (async) syncfs(r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r2, &(0x7f0000000000), 0x20b000) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000200)='illinois\x00', 0x9) (async) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10) (async) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000000)=0x2805, 0x4) (async) openat(r0, &(0x7f00000002c0)='/proc/self/exe\x00', 0x200000, 0x109) (async) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000280)={0x0, &(0x7f00000001c0)}, 0x10) (async) close(0xffffffffffffffff) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e20, @loopback}, 0x10) (async) recvmsg(r3, &(0x7f0000000580)={0x0, 0x41, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4084, 0xfffffe1f}], 0x6, 0x0, 0xfffffffffffffcc9}, 0x700) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(r4, 0x40309410, 0x0) 04:06:11 executing program 2: pkey_alloc(0x0, 0x1) (async, rerun: 64) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_USER_CONFIRM_NEG_REPLY}}, 0x7) (async, rerun: 64) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) 04:06:11 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x4c2b, 0xfffffffffffffffd) [ 574.208632][T11136] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop3. 04:06:11 executing program 3: r0 = syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="10000000000001000100050000000000ffffff7f200000005a4d", 0x1a, 0x400}, {&(0x7f0000000440)="ff00feffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff00ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff03f0ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffe1ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed41034844d6de4005", 0x809, 0x800}, {0x0, 0x0, 0x1400}], 0x0, &(0x7f0000000500)=ANY=[], 0x0) symlinkat(&(0x7f0000002940)='./file0\x00', r0, &(0x7f0000001900)='./file1\x00') bind$l2tp(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @private=0xa010102, 0x1}, 0x10) [ 574.350972][T11171] loop3: detected capacity change from 0 to 20 [ 574.396894][ T4680] kworker/u4:6: attempt to access beyond end of device [ 574.396894][ T4680] loop3: rw=1, sector=44, nr_sectors = 2 limit=20 [ 574.410204][ T4680] Buffer I/O error on dev loop3, logical block 22, lost async page write [ 574.432896][ T3694] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 574.440979][ T4680] kworker/u4:6: attempt to access beyond end of device [ 574.440979][ T4680] loop3: rw=1, sector=46, nr_sectors = 2 limit=20 [ 574.455627][ T4680] Buffer I/O error on dev loop3, logical block 23, lost async page write [ 574.592789][ T3778] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 574.672708][ T3694] usb 2-1: Using ep0 maxpacket: 16 [ 574.782746][ T3778] usb 5-1: device descriptor read/64, error 18 [ 574.793344][ T3694] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 574.982801][ T3694] usb 2-1: New USB device found, idVendor=15c2, idProduct=0040, bcdDevice=80.f3 [ 574.992237][ T3694] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 575.000341][ T3694] usb 2-1: Product: syz [ 575.004548][ T3694] usb 2-1: Manufacturer: syz [ 575.009156][ T3694] usb 2-1: SerialNumber: syz [ 575.017327][ T3694] usb 2-1: config 0 descriptor?? [ 575.052969][ T3778] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 575.063036][ T3694] input: iMON Panel, Knob and Mouse(15c2:0040) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input175 [ 575.282750][ T3778] usb 5-1: device descriptor read/64, error 18 [ 575.342818][ T3694] rc_core: IR keymap rc-imon-pad not found [ 575.348795][ T3694] Registered IR keymap rc-empty [ 575.355694][ T3694] imon 2-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 575.366096][ T3694] imon 2-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 575.413044][ T3778] usb usb5-port1: attempt power cycle [ 575.513633][ T3694] rc rc0: iMON Remote (15c2:0040) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 575.524567][ T3694] input: iMON Remote (15c2:0040) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input176 [ 575.539763][ T3694] imon 2-1:0.0: iMON device (15c2:0040, intf0) on usb<2:57> initialized [ 575.695984][T11139] imon:vfd_write: invalid payload size [ 575.702317][ T142] usb 2-1: USB disconnect, device number 57 [ 575.862767][ T3778] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 576.043142][ T3778] usb 5-1: device descriptor read/8, error -61 [ 576.322837][ T3778] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 576.502885][ T3778] usb 5-1: device descriptor read/8, error -61 [ 576.634383][ T3778] usb usb5-port1: unable to enumerate USB device 04:06:14 executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 04:06:14 executing program 2: pkey_alloc(0x0, 0x1) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_USER_CONFIRM_NEG_REPLY}}, 0x7) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) 04:06:14 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x4c2c, 0xfffffffffffffffd) 04:06:14 executing program 3: r0 = syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="10000000000001000100050000000000ffffff7f200000005a4d", 0x1a, 0x400}, {&(0x7f0000000440)="ff00feffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff00ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff03f0ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffe1ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed41034844d6de4005", 0x809, 0x800}, {0x0, 0x0, 0x1400}], 0x0, &(0x7f0000000500)=ANY=[], 0x0) symlinkat(&(0x7f0000002940)='./file0\x00', r0, &(0x7f0000001900)='./file1\x00') (async, rerun: 32) bind$l2tp(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @private=0xa010102, 0x1}, 0x10) (rerun: 32) 04:06:14 executing program 1: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000007c0)=ANY=[@ANYBLOB="1201000079201010c2154000f3800102030109021b0001000000000904000001e104550009058b0b40"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0xe0ffff00000000) 04:06:14 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time_recursive\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001400)={&(0x7f00000013c0)='ext4_es_find_extent_range_enter\x00'}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r1, 0xff, 0x0, 0x0, 0x0) syncfs(r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r2, &(0x7f0000000000), 0x20b000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000200)='illinois\x00', 0x9) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000000)=0x2805, 0x4) r4 = openat(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x0, 0x5) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000280)={0x0, &(0x7f00000001c0)}, 0x10) close(0xffffffffffffffff) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e20, @loopback}, 0x10) sendfile(r3, r4, 0x0, 0x90000) recvmsg(r3, &(0x7f0000000580)={0x0, 0x41, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4084, 0xfffffe1f}], 0x6, 0x0, 0xfffffffffffffcc9}, 0x700) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, 0x0) 04:06:14 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x4c2d, 0xfffffffffffffffd) 04:06:14 executing program 2: syz_emit_vhci(&(0x7f0000000100)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0x6b}, @l2cap_cid_signaling={{0x67}, [@l2cap_conn_req={{0x2, 0x1, 0x4}, {0x6, 0xf42}}, @l2cap_cmd_rej_unk={{0x1, 0x62, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x3, 0x8}, {0xfff, 0x8001, 0xfff, 0x1f}}, @l2cap_conf_req={{0x4, 0x4, 0x38}, {0x101, 0xcc, [@l2cap_conf_flushto={0x2, 0x2, 0x401}, @l2cap_conf_ews={0x7, 0x2, 0x81}, @l2cap_conf_ews={0x7, 0x2, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0xcc12}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x40, 0x3, 0x48, 0x3, 0x7}}, @l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_efs={0x6, 0x10, {0x7, 0x1, 0xfff, 0x2, 0x8, 0xf3}}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_create_chan_req={{0xc, 0x0, 0x5}, {0x5, 0x0, 0x9}}, @l2cap_move_chan_rsp={{0xf, 0x20, 0x4}, {0x800, 0x8ab}}]}}, 0x70) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_pkts={{0x13, 0x15}, {0x5, [{0xc8, 0x9}, {0xc8, 0x1000}, {0xc9}, {0xc8, 0x401}, {0xc8, 0x3ff}]}}}, 0x18) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT, 0x2) 04:06:14 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time_recursive\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001400)={&(0x7f00000013c0)='ext4_es_find_extent_range_enter\x00'}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r1, 0xff, 0x0, 0x0, 0x0) syncfs(r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r2, &(0x7f0000000000), 0x20b000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000200)='illinois\x00', 0x9) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000000)=0x2805, 0x4) r4 = openat(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x0, 0x5) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000280)={0x0, &(0x7f00000001c0)}, 0x10) close(0xffffffffffffffff) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e20, @loopback}, 0x10) sendfile(r3, r4, 0x0, 0x90000) recvmsg(r3, &(0x7f0000000580)={0x0, 0x41, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4084, 0xfffffe1f}], 0x6, 0x0, 0xfffffffffffffcc9}, 0x700) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time_recursive\x00', 0x26e1, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001400)={&(0x7f00000013c0)='ext4_es_find_extent_range_enter\x00'}, 0x10) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) getsockopt(r1, 0xff, 0x0, 0x0, 0x0) (async) syncfs(r1) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async) write$cgroup_type(r2, &(0x7f0000000000), 0x20b000) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000200)='illinois\x00', 0x9) (async) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10) (async) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000000)=0x2805, 0x4) (async) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x0, 0x5) (async) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000280)={0x0, &(0x7f00000001c0)}, 0x10) (async) close(0xffffffffffffffff) (async) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e20, @loopback}, 0x10) (async) sendfile(r3, r4, 0x0, 0x90000) (async) recvmsg(r3, &(0x7f0000000580)={0x0, 0x41, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4084, 0xfffffe1f}], 0x6, 0x0, 0xfffffffffffffcc9}, 0x700) (async) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, 0x0) (async) [ 577.176973][T11179] loop3: detected capacity change from 0 to 20 04:06:14 executing program 3: r0 = syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="10000000000001000100050000000000ffffff7f200000005a4d", 0x1a, 0x400}, {&(0x7f0000000440)="ff00feffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff00ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff03f0ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffe1ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed41034844d6de4005", 0x809, 0x800}, {0x0, 0x0, 0x1400}], 0x0, &(0x7f0000000500)=ANY=[], 0x0) symlinkat(&(0x7f0000002940)='./file0\x00', r0, &(0x7f0000001900)='./file1\x00') (async) bind$l2tp(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @private=0xa010102, 0x1}, 0x10) 04:06:14 executing program 2: syz_emit_vhci(&(0x7f0000000100)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0x6b}, @l2cap_cid_signaling={{0x67}, [@l2cap_conn_req={{0x2, 0x1, 0x4}, {0x6, 0xf42}}, @l2cap_cmd_rej_unk={{0x1, 0x62, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x3, 0x8}, {0xfff, 0x8001, 0xfff, 0x1f}}, @l2cap_conf_req={{0x4, 0x4, 0x38}, {0x101, 0xcc, [@l2cap_conf_flushto={0x2, 0x2, 0x401}, @l2cap_conf_ews={0x7, 0x2, 0x81}, @l2cap_conf_ews={0x7, 0x2, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0xcc12}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x40, 0x3, 0x48, 0x3, 0x7}}, @l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_efs={0x6, 0x10, {0x7, 0x1, 0xfff, 0x2, 0x8, 0xf3}}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_create_chan_req={{0xc, 0x0, 0x5}, {0x5, 0x0, 0x9}}, @l2cap_move_chan_rsp={{0xf, 0x20, 0x4}, {0x800, 0x8ab}}]}}, 0x70) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_pkts={{0x13, 0x15}, {0x5, [{0xc8, 0x9}, {0xc8, 0x1000}, {0xc9}, {0xc8, 0x401}, {0xc8, 0x3ff}]}}}, 0x18) (async) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT, 0x2) 04:06:14 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x4c2e, 0xfffffffffffffffd) [ 577.306537][ T4680] kworker/u4:6: attempt to access beyond end of device [ 577.306537][ T4680] loop3: rw=1, sector=44, nr_sectors = 2 limit=20 [ 577.346462][ T4680] Buffer I/O error on dev loop3, logical block 22, lost async page write [ 577.361721][ T4680] kworker/u4:6: attempt to access beyond end of device [ 577.361721][ T4680] loop3: rw=1, sector=46, nr_sectors = 2 limit=20 [ 577.381837][ T4680] Buffer I/O error on dev loop3, logical block 23, lost async page write [ 577.426547][T11203] loop3: detected capacity change from 0 to 20 [ 577.430561][ T9812] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 577.452839][ T3694] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 577.466356][ T9] kworker/u4:0: attempt to access beyond end of device [ 577.466356][ T9] loop3: rw=1, sector=44, nr_sectors = 2 limit=20 [ 577.479887][ T9] Buffer I/O error on dev loop3, logical block 22, lost async page write [ 577.489221][ T9] kworker/u4:0: attempt to access beyond end of device [ 577.489221][ T9] loop3: rw=1, sector=46, nr_sectors = 2 limit=20 [ 577.503499][ T9] Buffer I/O error on dev loop3, logical block 23, lost async page write [ 577.672994][ T3778] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 577.702732][ T3694] usb 2-1: Using ep0 maxpacket: 16 [ 577.822921][ T3694] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 577.882836][ T3778] usb 5-1: device descriptor read/64, error 18 [ 578.032968][ T3694] usb 2-1: New USB device found, idVendor=15c2, idProduct=0040, bcdDevice=80.f3 [ 578.042206][ T3694] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.050334][ T3694] usb 2-1: Product: syz [ 578.054615][ T3694] usb 2-1: Manufacturer: syz [ 578.059248][ T3694] usb 2-1: SerialNumber: syz [ 578.066960][ T3694] usb 2-1: config 0 descriptor?? [ 578.116265][ T3694] input: iMON Panel, Knob and Mouse(15c2:0040) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input177 [ 578.152947][ T3778] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 578.363715][ T3778] usb 5-1: device descriptor read/64, error 18 [ 578.422841][ T3694] rc_core: IR keymap rc-imon-pad not found [ 578.428799][ T3694] Registered IR keymap rc-empty [ 578.434279][ T3694] imon 2-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 578.444611][ T3694] imon 2-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 578.492933][ T3778] usb usb5-port1: attempt power cycle [ 578.576378][ T3694] rc rc0: iMON Remote (15c2:0040) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 578.587227][ T3694] input: iMON Remote (15c2:0040) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input178 [ 578.600168][ T3694] imon 2-1:0.0: iMON device (15c2:0040, intf0) on usb<2:58> initialized [ 578.756119][ T142] usb 2-1: USB disconnect, device number 58 [ 578.762738][ C0] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 578.912931][ T3778] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 579.092903][ T3778] usb 5-1: device descriptor read/8, error -61 [ 579.372688][ T3778] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 579.562987][ T3778] usb 5-1: device descriptor read/8, error -61 [ 579.685959][ T3778] usb usb5-port1: unable to enumerate USB device 04:06:17 executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 04:06:17 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time_recursive\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001400)={&(0x7f00000013c0)='ext4_es_find_extent_range_enter\x00'}, 0x10) (async) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r1, 0xff, 0x0, 0x0, 0x0) syncfs(r1) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r2, &(0x7f0000000000), 0x20b000) (async, rerun: 32) r3 = socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 32) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000200)='illinois\x00', 0x9) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10) (async, rerun: 32) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000000)=0x2805, 0x4) (rerun: 32) r4 = openat(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x0, 0x5) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000280)={0x0, &(0x7f00000001c0)}, 0x10) (async) close(0xffffffffffffffff) (async, rerun: 64) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e20, @loopback}, 0x10) (async, rerun: 64) sendfile(r3, r4, 0x0, 0x90000) (async) recvmsg(r3, &(0x7f0000000580)={0x0, 0x41, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4084, 0xfffffe1f}], 0x6, 0x0, 0xfffffffffffffcc9}, 0x700) (async) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, 0x0) 04:06:17 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x4c2f, 0xfffffffffffffffd) 04:06:17 executing program 2: syz_emit_vhci(&(0x7f0000000100)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0x6b}, @l2cap_cid_signaling={{0x67}, [@l2cap_conn_req={{0x2, 0x1, 0x4}, {0x6, 0xf42}}, @l2cap_cmd_rej_unk={{0x1, 0x62, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x3, 0x8}, {0xfff, 0x8001, 0xfff, 0x1f}}, @l2cap_conf_req={{0x4, 0x4, 0x38}, {0x101, 0xcc, [@l2cap_conf_flushto={0x2, 0x2, 0x401}, @l2cap_conf_ews={0x7, 0x2, 0x81}, @l2cap_conf_ews={0x7, 0x2, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0xcc12}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x40, 0x3, 0x48, 0x3, 0x7}}, @l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_efs={0x6, 0x10, {0x7, 0x1, 0xfff, 0x2, 0x8, 0xf3}}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_create_chan_req={{0xc, 0x0, 0x5}, {0x5, 0x0, 0x9}}, @l2cap_move_chan_rsp={{0xf, 0x20, 0x4}, {0x800, 0x8ab}}]}}, 0x70) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_pkts={{0x13, 0x15}, {0x5, [{0xc8, 0x9}, {0xc8, 0x1000}, {0xc9}, {0xc8, 0x401}, {0xc8, 0x3ff}]}}}, 0x18) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0x6b}, @l2cap_cid_signaling={{0x67}, [@l2cap_conn_req={{0x2, 0x1, 0x4}, {0x6, 0xf42}}, @l2cap_cmd_rej_unk={{0x1, 0x62, 0x2}, {0x5}}, @l2cap_create_chan_rsp={{0xd, 0x3, 0x8}, {0xfff, 0x8001, 0xfff, 0x1f}}, @l2cap_conf_req={{0x4, 0x4, 0x38}, {0x101, 0xcc, [@l2cap_conf_flushto={0x2, 0x2, 0x401}, @l2cap_conf_ews={0x7, 0x2, 0x81}, @l2cap_conf_ews={0x7, 0x2, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0xcc12}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x40, 0x3, 0x48, 0x3, 0x7}}, @l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_efs={0x6, 0x10, {0x7, 0x1, 0xfff, 0x2, 0x8, 0xf3}}, @l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_create_chan_req={{0xc, 0x0, 0x5}, {0x5, 0x0, 0x9}}, @l2cap_move_chan_rsp={{0xf, 0x20, 0x4}, {0x800, 0x8ab}}]}}, 0x70) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_pkts={{0x13, 0x15}, {0x5, [{0xc8, 0x9}, {0xc8, 0x1000}, {0xc9}, {0xc8, 0x401}, {0xc8, 0x3ff}]}}}, 0x18) (async) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT, 0x2) (async) 04:06:17 executing program 3: r0 = syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="10000000000001000100050000000000ffffff7f200000005a4d", 0x1a, 0x400}, {&(0x7f0000000440)="ff00feffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff00ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff03f0ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffe1ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed41034844d6de4005", 0x809, 0x800}, {0x0, 0x0, 0x1400}], 0x0, &(0x7f0000000500)=ANY=[], 0x0) symlinkat(&(0x7f0000002940)='./file0\x00', r0, &(0x7f0000001900)='./file1\x00') 04:06:17 executing program 1: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000007c0)=ANY=[@ANYBLOB="1201000079201010c2154000f3800102030109021b0001000000000904000001e104550009058b0b40"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0xf0ffffff7f0000) 04:06:17 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x4c30, 0xfffffffffffffffd) 04:06:17 executing program 2: syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT, 0x36) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="0407ffb1fffffffffffff39628663e07f4bc121dc99a3a7c0e61231194442f53166bc3d7c9e86c32e46b067bc0b7152b5870eb3bb90e8c366d1bc75be7ad14748e6c2ea933d6e93b59ed0c0be0421919c99ad09e50c14650ab239298c3d9a115b2a06b35e8b59a8bdc40cb5bf014ab358be7575f88167e3c11852dd99db90ab3dbcb1121453fd2c87c2e40cae07904c1fdc43e8c1068838a3d1e16e3601104f240d0a197daad3c10c005a46f483b33c550e6d92b325092859b4c28eb94938fc65f911caf8ac3bf157d1e15a7a1d10f9e84a8e40c135e3de60fec013663627f80b0c73e682ce3ab935a8292fe99a0c6d8c489365dbb719d1069c7a6a633cc3109787c"], 0x102) syz_emit_vhci(&(0x7f00000001c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xec}, "483f97171d73440ec36aad0e46dea82dbce1cc176c8da70eb4f0e2a478a815cb2738319da2351b25577884372ab54557085eb74e00451866b2b206801cefcae25749c8f30695754de7358d0213ff69c933b01722bcd4a8dc7fb28bb55268c07c339b402b4f27fc4bc31195c0b0703792e02ef80093e2d4d28f196a06f6e99c210e0b7aba1f19e0bee27564cabd5e9c87bec48b059b31d3efabbd8ff6fefb6c82e0f3e482d3903f9e9eff45cfa7e0ebf5b99a2b30f795bc33f08663954d53bcf36ee31a72654074e5dfb671e6c543d568c44c88c666695bfc0e3f80468d6ecffe7aedf9303bca242b21fa4578"}, 0xf0) [ 580.234159][T11212] loop3: detected capacity change from 0 to 20 04:06:17 executing program 3: r0 = syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="10000000000001000100050000000000ffffff7f200000005a4d", 0x1a, 0x400}, {&(0x7f0000000440)="ff00feffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff00ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff03f0ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffe1ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed41034844d6de4005", 0x809, 0x800}, {0x0, 0x0, 0x1400}], 0x0, &(0x7f0000000500)=ANY=[], 0x0) symlinkat(&(0x7f0000002940)='./file0\x00', r0, &(0x7f0000001900)='./file1\x00') [ 580.305938][ T12] kworker/u4:1: attempt to access beyond end of device [ 580.305938][ T12] loop3: rw=1, sector=44, nr_sectors = 2 limit=20 04:06:17 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.bfq.time_recursive\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001400)={&(0x7f00000013c0)='ext4_es_find_extent_range_enter\x00'}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r1, 0xff, 0x0, 0x0, 0x0) syncfs(r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r2, &(0x7f0000000000), 0x20b000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000200)='illinois\x00', 0x9) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000000)=0x2805, 0x4) r4 = openat(0xffffffffffffffff, &(0x7f00000002c0)='/proc/self/exe\x00', 0x0, 0xd) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000280)={0x0, &(0x7f00000001c0)}, 0x10) close(0xffffffffffffffff) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e20, @loopback}, 0x10) sendfile(r3, r4, 0x0, 0x90000) recvmsg(r3, &(0x7f0000000580)={0x0, 0x41, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4084, 0xfffffe1f}], 0x6, 0x0, 0xfffffffffffffcc9}, 0x700) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, 0x0) 04:06:17 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x4c31, 0xfffffffffffffffd) 04:06:17 executing program 2: syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT, 0x36) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x102) syz_emit_vhci(&(0x7f00000001c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xec}, "483f97171d73440ec36aad0e46dea82dbce1cc176c8da70eb4f0e2a478a815cb2738319da2351b25577884372ab54557085eb74e00451866b2b206801cefcae25749c8f30695754de7358d0213ff69c933b01722bcd4a8dc7fb28bb55268c07c339b402b4f27fc4bc31195c0b0703792e02ef80093e2d4d28f196a06f6e99c210e0b7aba1f19e0bee27564cabd5e9c87bec48b059b31d3efabbd8ff6fefb6c82e0f3e482d3903f9e9eff45cfa7e0ebf5b99a2b30f795bc33f08663954d53bcf36ee31a72654074e5dfb671e6c543d568c44c88c666695bfc0e3f80468d6ecffe7aedf9303bca242b21fa4578"}, 0xf0) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT, 0x36) (async) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x102) (async) syz_emit_vhci(&(0x7f00000001c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xec}, "483f97171d73440ec36aad0e46dea82dbce1cc176c8da70eb4f0e2a478a815cb2738319da2351b25577884372ab54557085eb74e00451866b2b206801cefcae25749c8f30695754de7358d0213ff69c933b01722bcd4a8dc7fb28bb55268c07c339b402b4f27fc4bc31195c0b0703792e02ef80093e2d4d28f196a06f6e99c210e0b7aba1f19e0bee27564cabd5e9c87bec48b059b31d3efabbd8ff6fefb6c82e0f3e482d3903f9e9eff45cfa7e0ebf5b99a2b30f795bc33f08663954d53bcf36ee31a72654074e5dfb671e6c543d568c44c88c666695bfc0e3f80468d6ecffe7aedf9303bca242b21fa4578"}, 0xf0) (async) [ 580.348537][ T12] Buffer I/O error on dev loop3, logical block 22, lost async page write [ 580.383999][ T12] kworker/u4:1: attempt to access beyond end of device [ 580.383999][ T12] loop3: rw=1, sector=46, nr_sectors = 2 limit=20 [ 580.439676][ T12] Buffer I/O error on dev loop3, logical block 23, lost async page write [ 580.507253][T11238] loop3: detected capacity change from 0 to 20 [ 580.529701][ T12] kworker/u4:1: attempt to access beyond end of device [ 580.529701][ T12] loop3: rw=1, sector=44, nr_sectors = 2 limit=20 [ 580.543713][ T12] Buffer I/O error on dev loop3, logical block 22, lost async page write [ 580.552282][ T12] kworker/u4:1: attempt to access beyond end of device [ 580.552282][ T12] loop3: rw=1, sector=46, nr_sectors = 2 limit=20 [ 580.557282][ T3778] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 580.566464][ T12] Buffer I/O error on dev loop3, logical block 23, lost async page write [ 580.692798][ T142] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 580.832718][ T3778] usb 2-1: Using ep0 maxpacket: 16 [ 580.882763][ T142] usb 5-1: device descriptor read/64, error 18 [ 580.982925][ T3778] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 581.153686][ T142] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 581.172976][ T3778] usb 2-1: New USB device found, idVendor=15c2, idProduct=0040, bcdDevice=80.f3 [ 581.182056][ T3778] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 581.190113][ T3778] usb 2-1: Product: syz [ 581.194329][ T3778] usb 2-1: Manufacturer: syz [ 581.199200][ T3778] usb 2-1: SerialNumber: syz [ 581.206134][ T3778] usb 2-1: config 0 descriptor?? [ 581.255040][ T3778] input: iMON Panel, Knob and Mouse(15c2:0040) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input179 [ 581.342772][ T142] usb 5-1: device descriptor read/64, error 18 [ 581.466882][ T142] usb usb5-port1: attempt power cycle [ 581.543129][ T3778] rc_core: IR keymap rc-imon-pad not found [ 581.549446][ T3778] Registered IR keymap rc-empty [ 581.554455][ T3778] imon 2-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 581.564657][ T3778] imon 2-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 581.704306][ T3778] rc rc0: iMON Remote (15c2:0040) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 581.715058][ T3778] input: iMON Remote (15c2:0040) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input180 [ 581.730943][ T3778] imon 2-1:0.0: iMON device (15c2:0040, intf0) on usb<2:59> initialized [ 581.872763][ T142] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 581.887293][ T3778] usb 2-1: USB disconnect, device number 59 [ 581.893304][ C0] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 582.042922][ T142] usb 5-1: device descriptor read/8, error -61 [ 582.312771][ T142] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 582.512791][ T142] usb 5-1: device descriptor read/8, error -61 [ 582.634433][ T142] usb usb5-port1: unable to enumerate USB device 04:06:20 executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000007c0)=ANY=[@ANYBLOB="1201000079201010c2154000f3800102030109021b"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 04:06:20 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.bfq.time_recursive\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001400)={&(0x7f00000013c0)='ext4_es_find_extent_range_enter\x00'}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r1, 0xff, 0x0, 0x0, 0x0) syncfs(r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r2, &(0x7f0000000000), 0x20b000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000200)='illinois\x00', 0x9) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000000)=0x2805, 0x4) r4 = openat(0xffffffffffffffff, &(0x7f00000002c0)='/proc/self/exe\x00', 0x0, 0xd) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000280)={0x0, &(0x7f00000001c0)}, 0x10) close(0xffffffffffffffff) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e20, @loopback}, 0x10) sendfile(r3, r4, 0x0, 0x90000) recvmsg(r3, &(0x7f0000000580)={0x0, 0x41, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4084, 0xfffffe1f}], 0x6, 0x0, 0xfffffffffffffcc9}, 0x700) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.bfq.time_recursive\x00', 0x26e1, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001400)={&(0x7f00000013c0)='ext4_es_find_extent_range_enter\x00'}, 0x10) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) getsockopt(r1, 0xff, 0x0, 0x0, 0x0) (async) syncfs(r1) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async) write$cgroup_type(r2, &(0x7f0000000000), 0x20b000) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000200)='illinois\x00', 0x9) (async) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10) (async) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000000)=0x2805, 0x4) (async) openat(0xffffffffffffffff, &(0x7f00000002c0)='/proc/self/exe\x00', 0x0, 0xd) (async) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000280)={0x0, &(0x7f00000001c0)}, 0x10) (async) close(0xffffffffffffffff) (async) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e20, @loopback}, 0x10) (async) sendfile(r3, r4, 0x0, 0x90000) (async) recvmsg(r3, &(0x7f0000000580)={0x0, 0x41, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4084, 0xfffffe1f}], 0x6, 0x0, 0xfffffffffffffcc9}, 0x700) (async) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, 0x0) (async) 04:06:20 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x4c32, 0xfffffffffffffffd) 04:06:20 executing program 2: syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT, 0x36) (async) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x102) syz_emit_vhci(&(0x7f00000001c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xec}, "483f97171d73440ec36aad0e46dea82dbce1cc176c8da70eb4f0e2a478a815cb2738319da2351b25577884372ab54557085eb74e00451866b2b206801cefcae25749c8f30695754de7358d0213ff69c933b01722bcd4a8dc7fb28bb55268c07c339b402b4f27fc4bc31195c0b0703792e02ef80093e2d4d28f196a06f6e99c210e0b7aba1f19e0bee27564cabd5e9c87bec48b059b31d3efabbd8ff6fefb6c82e0f3e482d3903f9e9eff45cfa7e0ebf5b99a2b30f795bc33f08663954d53bcf36ee31a72654074e5dfb671e6c543d568c44c88c666695bfc0e3f80468d6ecffe7aedf9303bca242b21fa4578"}, 0xf0) 04:06:20 executing program 3: r0 = syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="10000000000001000100050000000000ffffff7f200000005a4d", 0x1a, 0x400}, {&(0x7f0000000440)="ff00feffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff00ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff03f0ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffe1ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed41034844d6de4005", 0x809, 0x800}, {0x0, 0x0, 0x1400}], 0x0, &(0x7f0000000500)=ANY=[], 0x0) symlinkat(&(0x7f0000002940)='./file0\x00', r0, &(0x7f0000001900)='./file1\x00') 04:06:20 executing program 1: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000007c0)=ANY=[@ANYBLOB="1201000079201010c2154000f3800102030109021b0001000000000904000001e104550009058b0b40"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x100000000000000) 04:06:20 executing program 2: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x4040, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r0, 0xc0185879, &(0x7f0000000040)={@id={0x2, 0x0, @auto="001006040000000f00000400"}}) ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0) 04:06:20 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x4c33, 0xfffffffffffffffd) 04:06:20 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.bfq.time_recursive\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001400)={&(0x7f00000013c0)='ext4_es_find_extent_range_enter\x00'}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r1, 0xff, 0x0, 0x0, 0x0) syncfs(r1) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r2, &(0x7f0000000000), 0x20b000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000200)='illinois\x00', 0x9) (async) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10) (async) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000000)=0x2805, 0x4) (async) r4 = openat(0xffffffffffffffff, &(0x7f00000002c0)='/proc/self/exe\x00', 0x0, 0xd) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000280)={0x0, &(0x7f00000001c0)}, 0x10) (async) close(0xffffffffffffffff) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e20, @loopback}, 0x10) (async) sendfile(r3, r4, 0x0, 0x90000) recvmsg(r3, &(0x7f0000000580)={0x0, 0x41, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4084, 0xfffffe1f}], 0x6, 0x0, 0xfffffffffffffcc9}, 0x700) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, 0x0) [ 583.345994][T11250] loop3: detected capacity change from 0 to 20 04:06:20 executing program 3: r0 = syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="10000000000001000100050000000000ffffff7f200000005a4d", 0x1a, 0x400}, {&(0x7f0000000440)="ff00feffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff00ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff03f0ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffe1ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed41034844d6de4005", 0x809, 0x800}, {0x0, 0x0, 0x1400}], 0x0, &(0x7f0000000500)=ANY=[], 0x0) symlinkat(&(0x7f0000002940)='./file0\x00', r0, &(0x7f0000001900)='./file1\x00') readv(r0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/1, 0x1}], 0x1) 04:06:20 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time_recursive\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001400)={&(0x7f00000013c0)='ext4_es_find_extent_range_enter\x00'}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r1, 0xff, 0x0, 0x0, 0x0) syncfs(r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r2, &(0x7f0000000000), 0x20b000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000200)='illinois\x00', 0x9) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000000)=0x2805, 0x4) r4 = openat(0xffffffffffffffff, &(0x7f00000002c0)='/proc/self/exe\x00', 0x0, 0x5) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000280)={0x0, &(0x7f00000001c0)}, 0x10) close(0xffffffffffffffff) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e20, @loopback}, 0x10) sendfile(r3, r4, 0x0, 0x90000) recvmsg(r3, &(0x7f0000000580)={0x0, 0x41, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4084, 0xfffffe1f}], 0x6, 0x0, 0xfffffffffffffcc9}, 0x700) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, 0x0) [ 583.410019][ T12] kworker/u4:1: attempt to access beyond end of device [ 583.410019][ T12] loop3: rw=1, sector=44, nr_sectors = 2 limit=20 [ 583.410369][ T27] audit: type=1800 audit(1664078780.843:254): pid=11261 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name=".pending_reads" dev="sda1" ino=1179 res=0 errno=0 [ 583.433705][ T12] Buffer I/O error on dev loop3, logical block 22, lost async page write 04:06:20 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x4c34, 0xfffffffffffffffd) [ 583.472489][ T12] kworker/u4:1: attempt to access beyond end of device [ 583.472489][ T12] loop3: rw=1, sector=46, nr_sectors = 2 limit=20 [ 583.513433][ T12] Buffer I/O error on dev loop3, logical block 23, lost async page write [ 583.546136][T11266] loop3: detected capacity change from 0 to 20 [ 583.548495][ T9814] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 583.582775][ T23] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 583.608172][ T12] kworker/u4:1: attempt to access beyond end of device [ 583.608172][ T12] loop3: rw=1, sector=44, nr_sectors = 2 limit=20 [ 583.622954][ T12] Buffer I/O error on dev loop3, logical block 22, lost async page write [ 583.631535][ T12] kworker/u4:1: attempt to access beyond end of device [ 583.631535][ T12] loop3: rw=1, sector=46, nr_sectors = 2 limit=20 [ 583.645213][ T12] Buffer I/O error on dev loop3, logical block 23, lost async page write [ 583.822730][ T142] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 583.842938][ T23] usb 2-1: Using ep0 maxpacket: 16 [ 583.962902][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 584.062746][ T142] usb 5-1: Using ep0 maxpacket: 16 [ 584.132791][ T23] usb 2-1: New USB device found, idVendor=15c2, idProduct=0040, bcdDevice=80.f3 [ 584.141996][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 584.150492][ T23] usb 2-1: Product: syz [ 584.154855][ T23] usb 2-1: Manufacturer: syz [ 584.159720][ T23] usb 2-1: SerialNumber: syz [ 584.168283][ T23] usb 2-1: config 0 descriptor?? [ 584.183014][ T142] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 584.193459][ T142] usb 5-1: config 0 has no interfaces? [ 584.214785][ T23] input: iMON Panel, Knob and Mouse(15c2:0040) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input181 [ 584.352851][ T142] usb 5-1: New USB device found, idVendor=15c2, idProduct=0040, bcdDevice=80.f3 [ 584.362213][ T142] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 584.370599][ T142] usb 5-1: Product: syz [ 584.374869][ T142] usb 5-1: Manufacturer: syz [ 584.379576][ T142] usb 5-1: SerialNumber: syz [ 584.385603][ T142] usb 5-1: config 0 descriptor?? [ 584.502749][ T23] rc_core: IR keymap rc-imon-pad not found [ 584.508703][ T23] Registered IR keymap rc-empty [ 584.517482][ T23] imon 2-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 584.527624][ T23] imon 2-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 584.673807][ T23] rc rc0: iMON Remote (15c2:0040) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 584.685597][ T23] input: iMON Remote (15c2:0040) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input182 [ 584.699364][ T23] imon 2-1:0.0: iMON device (15c2:0040, intf0) on usb<2:60> initialized [ 584.856315][ T3694] usb 2-1: USB disconnect, device number 60 04:06:23 executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000007c0)=ANY=[@ANYBLOB="1201000079201010c2154000f3800102030109021b"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 04:06:23 executing program 1: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000007c0)=ANY=[@ANYBLOB="1201000079201010c2154000f3800102030109021b0001000000000904000001e104550009058b0b40"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x200000000000000) 04:06:23 executing program 3: r0 = syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="10000000000001000100050000000000ffffff7f200000005a4d", 0x1a, 0x400}, {&(0x7f0000000440)="ff00feffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff00ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff03f0ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffe1ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed41034844d6de4005", 0x809, 0x800}, {0x0, 0x0, 0x1400}], 0x0, &(0x7f0000000500)=ANY=[], 0x0) symlinkat(&(0x7f0000002940)='./file0\x00', r0, &(0x7f0000001900)='./file1\x00') readv(r0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/1, 0x1}], 0x1) syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="10000000000001000100050000000000ffffff7f200000005a4d", 0x1a, 0x400}, {&(0x7f0000000440)="ff00feffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff00ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff03f0ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffe1ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed41034844d6de4005", 0x809, 0x800}, {0x0, 0x0, 0x1400}], 0x0, &(0x7f0000000500)=ANY=[], 0x0) (async) symlinkat(&(0x7f0000002940)='./file0\x00', r0, &(0x7f0000001900)='./file1\x00') (async) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/1, 0x1}], 0x1) (async) 04:06:23 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time_recursive\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001400)={&(0x7f00000013c0)='ext4_es_find_extent_range_enter\x00'}, 0x10) (async) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r1, 0xff, 0x0, 0x0, 0x0) (async) syncfs(r1) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r2, &(0x7f0000000000), 0x20b000) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000200)='illinois\x00', 0x9) (async) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000000)=0x2805, 0x4) r4 = openat(0xffffffffffffffff, &(0x7f00000002c0)='/proc/self/exe\x00', 0x0, 0x5) (async) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000280)={0x0, &(0x7f00000001c0)}, 0x10) close(0xffffffffffffffff) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e20, @loopback}, 0x10) (async) sendfile(r3, r4, 0x0, 0x90000) (async) recvmsg(r3, &(0x7f0000000580)={0x0, 0x41, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4084, 0xfffffe1f}], 0x6, 0x0, 0xfffffffffffffcc9}, 0x700) (async) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, 0x0) 04:06:23 executing program 2: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x4040, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r0, 0xc0185879, &(0x7f0000000040)={@id={0x2, 0x0, @auto="001006040000000f00000400"}}) ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0) 04:06:23 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x4c35, 0xfffffffffffffffd) [ 586.360733][ T23] usb 5-1: USB disconnect, device number 45 [ 586.387854][T11277] loop3: detected capacity change from 0 to 20 04:06:23 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time_recursive\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001400)={&(0x7f00000013c0)='ext4_es_find_extent_range_enter\x00'}, 0x10) (async) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r1, 0xff, 0x0, 0x0, 0x0) (async) syncfs(r1) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r2, &(0x7f0000000000), 0x20b000) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000200)='illinois\x00', 0x9) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10) (async) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000000)=0x2805, 0x4) (async) r4 = openat(0xffffffffffffffff, &(0x7f00000002c0)='/proc/self/exe\x00', 0x0, 0x5) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000280)={0x0, &(0x7f00000001c0)}, 0x10) (async) close(0xffffffffffffffff) (async) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e20, @loopback}, 0x10) (async) sendfile(r3, r4, 0x0, 0x90000) recvmsg(r3, &(0x7f0000000580)={0x0, 0x41, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4084, 0xfffffe1f}], 0x6, 0x0, 0xfffffffffffffcc9}, 0x700) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, 0x0) 04:06:23 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x4c36, 0xfffffffffffffffd) 04:06:23 executing program 2: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x4040, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r0, 0xc0185879, &(0x7f0000000040)={@id={0x2, 0x0, @auto="001006040000000f00000400"}}) ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0) 04:06:23 executing program 3: r0 = syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="10000000000001000100050000000000ffffff7f200000005a4d", 0x1a, 0x400}, {&(0x7f0000000440)="ff00feffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff00ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff03f0ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffe1ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed41034844d6de4005", 0x809, 0x800}, {0x0, 0x0, 0x1400}], 0x0, &(0x7f0000000500)=ANY=[], 0x0) symlinkat(&(0x7f0000002940)='./file0\x00', r0, &(0x7f0000001900)='./file1\x00') readv(r0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/1, 0x1}], 0x1) syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="10000000000001000100050000000000ffffff7f200000005a4d", 0x1a, 0x400}, {&(0x7f0000000440)="ff00feffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff00ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff03f0ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffe1ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed41034844d6de4005", 0x809, 0x800}, {0x0, 0x0, 0x1400}], 0x0, &(0x7f0000000500)=ANY=[], 0x0) (async) symlinkat(&(0x7f0000002940)='./file0\x00', r0, &(0x7f0000001900)='./file1\x00') (async) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/1, 0x1}], 0x1) (async) [ 586.404595][ T27] audit: type=1800 audit(1664078783.843:255): pid=11279 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name=".pending_reads" dev="sda1" ino=1163 res=0 errno=0 04:06:23 executing program 2: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_USER_CONFIRM_NEG_REPLY}}, 0x7) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x1, 0x14}, @l2cap_cid_le_signaling={{0x10}, @l2cap_ecred_reconf_req={{0x19, 0x1, 0xc}, {0x2, 0x200, [0x401, 0x401, 0x7, 0x8000]}}}}, 0x19) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_ecred_conn_rsp={{0x18, 0x3, 0xa}, {0x1, 0x7ff, 0xfff, 0x1, [0x8]}}}}, 0x17) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x54}, "f33819b99c10bf5fd89fa8d3c55481446e8509b93d45f75c5d2281afa3ca3f466f4ce01afb33327ac632a62d53b5a290ef0b5be6a925c7e93695021481554a9a484c4a81ad9d538c36e56f53a1b660675c01b0a9"}, 0x58) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x71}, "333c44ce0ec3eaee8ba766a6f41e2ff2e16eb1bea483ce55aef3d5911a454fae468c975882ea9494f84dd13c24b36d23e8d40bcdfa24de33b6703bd2f62a2955babe11fb6274b6b1e9ede9dbb5877a5faca7950ab2f51db0f063852677e41e3a38cbf7a7b8e0a421cc6ca9b6a7e6d02a64"}, 0x75) 04:06:23 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x4c37, 0xfffffffffffffffd) [ 586.471270][ T2432] kworker/u4:5: attempt to access beyond end of device [ 586.471270][ T2432] loop3: rw=1, sector=44, nr_sectors = 2 limit=20 [ 586.489343][ T27] audit: type=1800 audit(1664078783.923:256): pid=11291 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name=".pending_reads" dev="sda1" ino=1169 res=0 errno=0 [ 586.493938][ T2432] Buffer I/O error on dev loop3, logical block 22, lost async page write [ 586.547259][ T2432] kworker/u4:5: attempt to access beyond end of device [ 586.547259][ T2432] loop3: rw=1, sector=46, nr_sectors = 2 limit=20 [ 586.564453][ T2432] Buffer I/O error on dev loop3, logical block 23, lost async page write [ 586.634250][T11302] loop3: detected capacity change from 0 to 20 [ 586.673673][ T2432] kworker/u4:5: attempt to access beyond end of device [ 586.673673][ T2432] loop3: rw=1, sector=44, nr_sectors = 2 limit=20 [ 586.687291][ T142] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 586.701606][ T2432] Buffer I/O error on dev loop3, logical block 22, lost async page write [ 586.712953][ T2432] kworker/u4:5: attempt to access beyond end of device [ 586.712953][ T2432] loop3: rw=1, sector=46, nr_sectors = 2 limit=20 [ 586.727094][ T2432] Buffer I/O error on dev loop3, logical block 23, lost async page write [ 586.862855][ T23] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 586.972923][ T142] usb 2-1: Using ep0 maxpacket: 16 [ 587.092972][ T142] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 587.103996][ T23] usb 5-1: Using ep0 maxpacket: 16 [ 587.243105][ T23] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 587.253541][ T23] usb 5-1: config 0 has no interfaces? [ 587.292994][ T142] usb 2-1: New USB device found, idVendor=15c2, idProduct=0040, bcdDevice=80.f3 [ 587.302175][ T142] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 587.310547][ T142] usb 2-1: Product: syz [ 587.314967][ T142] usb 2-1: Manufacturer: syz [ 587.319601][ T142] usb 2-1: SerialNumber: syz [ 587.327203][ T142] usb 2-1: config 0 descriptor?? [ 587.365789][ T142] input: iMON Panel, Knob and Mouse(15c2:0040) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input183 [ 587.433083][ T23] usb 5-1: New USB device found, idVendor=15c2, idProduct=0040, bcdDevice=80.f3 [ 587.442202][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 587.450403][ T23] usb 5-1: Product: syz [ 587.454613][ T23] usb 5-1: Manufacturer: syz [ 587.459193][ T23] usb 5-1: SerialNumber: syz [ 587.467549][ T23] usb 5-1: config 0 descriptor?? [ 587.662905][ T142] rc_core: IR keymap rc-imon-pad not found [ 587.669024][ T142] Registered IR keymap rc-empty [ 587.674532][ T142] imon 2-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 587.684806][ T142] imon 2-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 587.843924][ T142] rc rc0: iMON Remote (15c2:0040) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 587.854992][ T142] input: iMON Remote (15c2:0040) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input184 [ 587.867637][ T142] imon 2-1:0.0: iMON device (15c2:0040, intf0) on usb<2:61> initialized [ 588.016958][ T3691] usb 2-1: USB disconnect, device number 61 [ 588.022970][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored 04:06:26 executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000007c0)=ANY=[@ANYBLOB="1201000079201010c2154000f3800102030109021b"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 04:06:26 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time_recursive\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001400)={&(0x7f00000013c0)='ext4_es_find_extent_range_enter\x00'}, 0x10) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r2, 0xff, 0x0, 0x0, 0x0) syncfs(r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r3, &(0x7f0000000000), 0x20b000) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000200)='illinois\x00', 0x9) bind$inet(r4, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r4, 0x6, 0x2, &(0x7f0000000000)=0x2805, 0x4) r5 = openat(0xffffffffffffffff, &(0x7f00000002c0)='/proc/self/exe\x00', 0x0, 0x5) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000280)={0x0, &(0x7f00000001c0)}, 0x10) close(r1) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e20, @loopback}, 0x10) sendfile(r4, r5, 0x0, 0x90000) recvmsg(r4, &(0x7f0000000580)={0x0, 0x41, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4084, 0xfffffe1f}], 0x6, 0x0, 0xfffffffffffffcc9}, 0x700) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, 0x0) 04:06:26 executing program 2: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_USER_CONFIRM_NEG_REPLY}}, 0x7) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x1, 0x14}, @l2cap_cid_le_signaling={{0x10}, @l2cap_ecred_reconf_req={{0x19, 0x1, 0xc}, {0x2, 0x200, [0x401, 0x401, 0x7, 0x8000]}}}}, 0x19) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_ecred_conn_rsp={{0x18, 0x3, 0xa}, {0x1, 0x7ff, 0xfff, 0x1, [0x8]}}}}, 0x17) (async, rerun: 32) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x54}, "f33819b99c10bf5fd89fa8d3c55481446e8509b93d45f75c5d2281afa3ca3f466f4ce01afb33327ac632a62d53b5a290ef0b5be6a925c7e93695021481554a9a484c4a81ad9d538c36e56f53a1b660675c01b0a9"}, 0x58) (async, rerun: 32) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x71}, "333c44ce0ec3eaee8ba766a6f41e2ff2e16eb1bea483ce55aef3d5911a454fae468c975882ea9494f84dd13c24b36d23e8d40bcdfa24de33b6703bd2f62a2955babe11fb6274b6b1e9ede9dbb5877a5faca7950ab2f51db0f063852677e41e3a38cbf7a7b8e0a421cc6ca9b6a7e6d02a64"}, 0x75) 04:06:26 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x4c38, 0xfffffffffffffffd) 04:06:26 executing program 3: r0 = syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="10000000000001000100050000000000ffffff7f200000005a4d", 0x1a, 0x400}, {&(0x7f0000000440)="ff00feffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff00ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff03f0ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffe1ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed41034844d6de4005", 0x809, 0x800}, {0x0, 0x0, 0x1400}], 0x0, &(0x7f0000000500)=ANY=[], 0x0) symlinkat(&(0x7f0000002940)='./file0\x00', r0, &(0x7f0000001900)='./file1\x00') r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x4040, 0x0) sched_setattr(0xffffffffffffffff, &(0x7f00000000c0)={0x38, 0x0, 0x0, 0x7fffffff, 0x1, 0x81, 0x1, 0x8000000000000000, 0x3ff, 0x1f}, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r1, 0xc0185879, &(0x7f0000000040)={@id={0x2, 0x0, @auto="001006040000000f00000400"}}) ioctl$BTRFS_IOC_DEV_REPLACE(r1, 0xca289435, &(0x7f0000000c80)={0x0, 0x100, @status={[0x25, 0x3, 0x10000, 0xc0, 0xe4, 0x7]}, [0x3, 0x1, 0xc80, 0x83e, 0x290, 0x0, 0x7, 0x0, 0x100, 0x4, 0x0, 0x8a34, 0xffffffffffffffff, 0x101, 0x9, 0x4, 0x4, 0x0, 0x1f, 0x3bf, 0xfff, 0x809, 0x3, 0x5, 0x5493, 0x6, 0x4, 0x4, 0x1f, 0x7, 0x5, 0x8, 0x5, 0x8001, 0x80, 0x401, 0x7aa5, 0x2, 0x6, 0x1, 0x8001, 0x0, 0x7fff, 0xbe98, 0x1, 0x3ff, 0x80000001, 0xd22e, 0x5, 0x2, 0x6, 0x7ff, 0x80000000, 0x7f, 0x14, 0x979, 0x80, 0xb73f, 0x200, 0x67, 0x1, 0x2, 0x8, 0x5]}) 04:06:26 executing program 1: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000007c0)=ANY=[@ANYBLOB="1201000079201010c2154000f3800102030109021b0001000000000904000001e104550009058b0b40"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x300000000000000) 04:06:26 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time_recursive\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001400)={&(0x7f00000013c0)='ext4_es_find_extent_range_enter\x00'}, 0x10) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r2, 0xff, 0x0, 0x0, 0x0) syncfs(r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r3, &(0x7f0000000000), 0x20b000) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000200)='illinois\x00', 0x9) bind$inet(r4, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r4, 0x6, 0x2, &(0x7f0000000000)=0x2805, 0x4) r5 = openat(0xffffffffffffffff, &(0x7f00000002c0)='/proc/self/exe\x00', 0x0, 0x5) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000280)={0x0, &(0x7f00000001c0)}, 0x10) close(r1) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e20, @loopback}, 0x10) sendfile(r4, r5, 0x0, 0x90000) recvmsg(r4, &(0x7f0000000580)={0x0, 0x41, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4084, 0xfffffe1f}], 0x6, 0x0, 0xfffffffffffffcc9}, 0x700) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time_recursive\x00', 0x26e1, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001400)={&(0x7f00000013c0)='ext4_es_find_extent_range_enter\x00'}, 0x10) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) getsockopt(r2, 0xff, 0x0, 0x0, 0x0) (async) syncfs(r2) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async) write$cgroup_type(r3, &(0x7f0000000000), 0x20b000) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000200)='illinois\x00', 0x9) (async) bind$inet(r4, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10) (async) setsockopt$inet_tcp_int(r4, 0x6, 0x2, &(0x7f0000000000)=0x2805, 0x4) (async) openat(0xffffffffffffffff, &(0x7f00000002c0)='/proc/self/exe\x00', 0x0, 0x5) (async) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000280)={0x0, &(0x7f00000001c0)}, 0x10) (async) close(r1) (async) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e20, @loopback}, 0x10) (async) sendfile(r4, r5, 0x0, 0x90000) (async) recvmsg(r4, &(0x7f0000000580)={0x0, 0x41, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4084, 0xfffffe1f}], 0x6, 0x0, 0xfffffffffffffcc9}, 0x700) (async) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, 0x0) (async) [ 589.424594][ T3778] usb 5-1: USB disconnect, device number 46 04:06:26 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x4c39, 0xfffffffffffffffd) 04:06:26 executing program 2: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_USER_CONFIRM_NEG_REPLY}}, 0x7) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x1, 0x14}, @l2cap_cid_le_signaling={{0x10}, @l2cap_ecred_reconf_req={{0x19, 0x1, 0xc}, {0x2, 0x200, [0x401, 0x401, 0x7, 0x8000]}}}}, 0x19) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_ecred_conn_rsp={{0x18, 0x3, 0xa}, {0x1, 0x7ff, 0xfff, 0x1, [0x8]}}}}, 0x17) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x54}, "f33819b99c10bf5fd89fa8d3c55481446e8509b93d45f75c5d2281afa3ca3f466f4ce01afb33327ac632a62d53b5a290ef0b5be6a925c7e93695021481554a9a484c4a81ad9d538c36e56f53a1b660675c01b0a9"}, 0x58) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x71}, "333c44ce0ec3eaee8ba766a6f41e2ff2e16eb1bea483ce55aef3d5911a454fae468c975882ea9494f84dd13c24b36d23e8d40bcdfa24de33b6703bd2f62a2955babe11fb6274b6b1e9ede9dbb5877a5faca7950ab2f51db0f063852677e41e3a38cbf7a7b8e0a421cc6ca9b6a7e6d02a64"}, 0x75) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_USER_CONFIRM_NEG_REPLY}}, 0x7) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x1, 0x14}, @l2cap_cid_le_signaling={{0x10}, @l2cap_ecred_reconf_req={{0x19, 0x1, 0xc}, {0x2, 0x200, [0x401, 0x401, 0x7, 0x8000]}}}}, 0x19) (async) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_ecred_conn_rsp={{0x18, 0x3, 0xa}, {0x1, 0x7ff, 0xfff, 0x1, [0x8]}}}}, 0x17) (async) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x54}, "f33819b99c10bf5fd89fa8d3c55481446e8509b93d45f75c5d2281afa3ca3f466f4ce01afb33327ac632a62d53b5a290ef0b5be6a925c7e93695021481554a9a484c4a81ad9d538c36e56f53a1b660675c01b0a9"}, 0x58) (async) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x71}, "333c44ce0ec3eaee8ba766a6f41e2ff2e16eb1bea483ce55aef3d5911a454fae468c975882ea9494f84dd13c24b36d23e8d40bcdfa24de33b6703bd2f62a2955babe11fb6274b6b1e9ede9dbb5877a5faca7950ab2f51db0f063852677e41e3a38cbf7a7b8e0a421cc6ca9b6a7e6d02a64"}, 0x75) (async) [ 589.466270][T11312] loop3: detected capacity change from 0 to 20 04:06:26 executing program 3: r0 = syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="10000000000001000100050000000000ffffff7f200000005a4d", 0x1a, 0x400}, {&(0x7f0000000440)="ff00feffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff00ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff03f0ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffe1ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed41034844d6de4005", 0x809, 0x800}, {0x0, 0x0, 0x1400}], 0x0, &(0x7f0000000500)=ANY=[], 0x0) symlinkat(&(0x7f0000002940)='./file0\x00', r0, &(0x7f0000001900)='./file1\x00') r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x4040, 0x0) sched_setattr(0xffffffffffffffff, &(0x7f00000000c0)={0x38, 0x0, 0x0, 0x7fffffff, 0x1, 0x81, 0x1, 0x8000000000000000, 0x3ff, 0x1f}, 0x0) (async) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r1, 0xc0185879, &(0x7f0000000040)={@id={0x2, 0x0, @auto="001006040000000f00000400"}}) (async) ioctl$BTRFS_IOC_DEV_REPLACE(r1, 0xca289435, &(0x7f0000000c80)={0x0, 0x100, @status={[0x25, 0x3, 0x10000, 0xc0, 0xe4, 0x7]}, [0x3, 0x1, 0xc80, 0x83e, 0x290, 0x0, 0x7, 0x0, 0x100, 0x4, 0x0, 0x8a34, 0xffffffffffffffff, 0x101, 0x9, 0x4, 0x4, 0x0, 0x1f, 0x3bf, 0xfff, 0x809, 0x3, 0x5, 0x5493, 0x6, 0x4, 0x4, 0x1f, 0x7, 0x5, 0x8, 0x5, 0x8001, 0x80, 0x401, 0x7aa5, 0x2, 0x6, 0x1, 0x8001, 0x0, 0x7fff, 0xbe98, 0x1, 0x3ff, 0x80000001, 0xd22e, 0x5, 0x2, 0x6, 0x7ff, 0x80000000, 0x7f, 0x14, 0x979, 0x80, 0xb73f, 0x200, 0x67, 0x1, 0x2, 0x8, 0x5]}) [ 589.520070][ T27] audit: type=1800 audit(1664078786.953:257): pid=11312 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=".pending_reads" dev="sda1" ino=1165 res=0 errno=0 [ 589.554320][ T41] kworker/u4:2: attempt to access beyond end of device [ 589.554320][ T41] loop3: rw=1, sector=44, nr_sectors = 2 limit=20 04:06:27 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time_recursive\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001400)={&(0x7f00000013c0)='ext4_es_find_extent_range_enter\x00'}, 0x10) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r2, 0xff, 0x0, 0x0, 0x0) syncfs(r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r3, &(0x7f0000000000), 0x20b000) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000200)='illinois\x00', 0x9) bind$inet(r4, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r4, 0x6, 0x2, &(0x7f0000000000)=0x2805, 0x4) r5 = openat(0xffffffffffffffff, &(0x7f00000002c0)='/proc/self/exe\x00', 0x0, 0x5) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000280)={0x0, &(0x7f00000001c0)}, 0x10) close(r1) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e20, @loopback}, 0x10) sendfile(r4, r5, 0x0, 0x90000) recvmsg(r4, &(0x7f0000000580)={0x0, 0x41, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4084, 0xfffffe1f}], 0x6, 0x0, 0xfffffffffffffcc9}, 0x700) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time_recursive\x00', 0x26e1, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001400)={&(0x7f00000013c0)='ext4_es_find_extent_range_enter\x00'}, 0x10) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) getsockopt(r2, 0xff, 0x0, 0x0, 0x0) (async) syncfs(r2) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async) write$cgroup_type(r3, &(0x7f0000000000), 0x20b000) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000200)='illinois\x00', 0x9) (async) bind$inet(r4, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10) (async) setsockopt$inet_tcp_int(r4, 0x6, 0x2, &(0x7f0000000000)=0x2805, 0x4) (async) openat(0xffffffffffffffff, &(0x7f00000002c0)='/proc/self/exe\x00', 0x0, 0x5) (async) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000280)={0x0, &(0x7f00000001c0)}, 0x10) (async) close(r1) (async) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e20, @loopback}, 0x10) (async) sendfile(r4, r5, 0x0, 0x90000) (async) recvmsg(r4, &(0x7f0000000580)={0x0, 0x41, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4084, 0xfffffe1f}], 0x6, 0x0, 0xfffffffffffffcc9}, 0x700) (async) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, 0x0) (async) 04:06:27 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x4c3a, 0xfffffffffffffffd) [ 589.585894][ T41] Buffer I/O error on dev loop3, logical block 22, lost async page write [ 589.606642][ T41] kworker/u4:2: attempt to access beyond end of device [ 589.606642][ T41] loop3: rw=1, sector=46, nr_sectors = 2 limit=20 [ 589.637061][ T41] Buffer I/O error on dev loop3, logical block 23, lost async page write [ 589.682343][T11336] loop3: detected capacity change from 0 to 20 [ 589.713637][ T27] audit: type=1800 audit(1664078787.153:258): pid=11336 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=".pending_reads" dev="sda1" ino=1165 res=0 errno=0 [ 589.750452][ T2432] kworker/u4:5: attempt to access beyond end of device [ 589.750452][ T2432] loop3: rw=1, sector=44, nr_sectors = 2 limit=20 [ 589.762754][ T3691] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 589.769470][ T2432] Buffer I/O error on dev loop3, logical block 22, lost async page write [ 589.780922][ T2432] kworker/u4:5: attempt to access beyond end of device [ 589.780922][ T2432] loop3: rw=1, sector=46, nr_sectors = 2 limit=20 [ 589.794824][ T2432] Buffer I/O error on dev loop3, logical block 23, lost async page write [ 589.972760][ T3778] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 590.012736][ T3691] usb 2-1: Using ep0 maxpacket: 16 [ 590.132887][ T3691] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 590.263106][ T3778] usb 5-1: Using ep0 maxpacket: 16 [ 590.302890][ T3691] usb 2-1: New USB device found, idVendor=15c2, idProduct=0040, bcdDevice=80.f3 [ 590.312050][ T3691] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 590.320395][ T3691] usb 2-1: Product: syz [ 590.324758][ T3691] usb 2-1: Manufacturer: syz [ 590.329363][ T3691] usb 2-1: SerialNumber: syz [ 590.336216][ T3691] usb 2-1: config 0 descriptor?? [ 590.379208][ T3691] input: iMON Panel, Knob and Mouse(15c2:0040) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input185 [ 590.393216][ T3778] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 590.403725][ T3778] usb 5-1: config 0 has no interfaces? [ 590.572978][ T3778] usb 5-1: New USB device found, idVendor=15c2, idProduct=0040, bcdDevice=80.f3 [ 590.582107][ T3778] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 590.590166][ T3778] usb 5-1: Product: syz [ 590.594416][ T3778] usb 5-1: Manufacturer: syz [ 590.599037][ T3778] usb 5-1: SerialNumber: syz [ 590.607540][ T3778] usb 5-1: config 0 descriptor?? [ 590.662965][ T3691] rc_core: IR keymap rc-imon-pad not found [ 590.668846][ T3691] Registered IR keymap rc-empty [ 590.673825][ T3691] imon 2-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 590.684100][ T3691] imon 2-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 590.838825][ T3691] rc rc0: iMON Remote (15c2:0040) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 590.850309][ T3691] input: iMON Remote (15c2:0040) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input186 [ 590.864773][ T3691] imon 2-1:0.0: iMON device (15c2:0040, intf0) on usb<2:62> initialized [ 591.016016][ T3778] usb 2-1: USB disconnect, device number 62 04:06:29 executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000007c0)=ANY=[@ANYBLOB="1201000079201010c2154000f3800102030109021b00010000000009040000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 04:06:29 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time_recursive\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001400)={&(0x7f00000013c0)='ext4_es_find_extent_range_enter\x00'}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r1, 0xff, 0x0, 0x0, 0x0) syncfs(r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r2, &(0x7f0000000000), 0x20b000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000200)='illinois\x00', 0x9) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000000)=0x2805, 0x4) r4 = openat(0xffffffffffffffff, &(0x7f00000002c0)='/proc/self/exe\x00', 0x0, 0x5) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000280)={0x0, &(0x7f00000001c0)}, 0x10) close(0xffffffffffffffff) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4a20, @loopback}, 0x10) sendfile(r3, r4, 0x0, 0x90000) recvmsg(r3, &(0x7f0000000580)={0x0, 0x41, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4084, 0xfffffe1f}], 0x6, 0x0, 0xfffffffffffffcc9}, 0x700) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, 0x0) 04:06:29 executing program 2: ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f0000000000)={0x0, 0x2}) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_USER_CONFIRM_NEG_REPLY}}, 0x7) 04:06:29 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x4c3b, 0xfffffffffffffffd) 04:06:29 executing program 3: r0 = syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="10000000000001000100050000000000ffffff7f200000005a4d", 0x1a, 0x400}, {&(0x7f0000000440)="ff00feffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff00ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff03f0ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffe1ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed41034844d6de4005", 0x809, 0x800}, {0x0, 0x0, 0x1400}], 0x0, &(0x7f0000000500)=ANY=[], 0x0) symlinkat(&(0x7f0000002940)='./file0\x00', r0, &(0x7f0000001900)='./file1\x00') (async) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x4040, 0x0) sched_setattr(0xffffffffffffffff, &(0x7f00000000c0)={0x38, 0x0, 0x0, 0x7fffffff, 0x1, 0x81, 0x1, 0x8000000000000000, 0x3ff, 0x1f}, 0x0) (async) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r1, 0xc0185879, &(0x7f0000000040)={@id={0x2, 0x0, @auto="001006040000000f00000400"}}) (async) ioctl$BTRFS_IOC_DEV_REPLACE(r1, 0xca289435, &(0x7f0000000c80)={0x0, 0x100, @status={[0x25, 0x3, 0x10000, 0xc0, 0xe4, 0x7]}, [0x3, 0x1, 0xc80, 0x83e, 0x290, 0x0, 0x7, 0x0, 0x100, 0x4, 0x0, 0x8a34, 0xffffffffffffffff, 0x101, 0x9, 0x4, 0x4, 0x0, 0x1f, 0x3bf, 0xfff, 0x809, 0x3, 0x5, 0x5493, 0x6, 0x4, 0x4, 0x1f, 0x7, 0x5, 0x8, 0x5, 0x8001, 0x80, 0x401, 0x7aa5, 0x2, 0x6, 0x1, 0x8001, 0x0, 0x7fff, 0xbe98, 0x1, 0x3ff, 0x80000001, 0xd22e, 0x5, 0x2, 0x6, 0x7ff, 0x80000000, 0x7f, 0x14, 0x979, 0x80, 0xb73f, 0x200, 0x67, 0x1, 0x2, 0x8, 0x5]}) 04:06:29 executing program 1: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000007c0)=ANY=[@ANYBLOB="1201000079201010c2154000f3800102030109021b0001000000000904000001e104550009058b0b40"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x400000000000000) 04:06:30 executing program 2: ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f0000000000)={0x0, 0x2}) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_USER_CONFIRM_NEG_REPLY}}, 0x7) 04:06:30 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x4c3c, 0xfffffffffffffffd) [ 592.507702][ T3691] usb 5-1: USB disconnect, device number 47 [ 592.546264][T11345] loop3: detected capacity change from 0 to 20 04:06:30 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time_recursive\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001400)={&(0x7f00000013c0)='ext4_es_find_extent_range_enter\x00'}, 0x10) (async) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r1, 0xff, 0x0, 0x0, 0x0) (async) syncfs(r1) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r2, &(0x7f0000000000), 0x20b000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000200)='illinois\x00', 0x9) (async) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10) (async) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000000)=0x2805, 0x4) (async) r4 = openat(0xffffffffffffffff, &(0x7f00000002c0)='/proc/self/exe\x00', 0x0, 0x5) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000280)={0x0, &(0x7f00000001c0)}, 0x10) (async) close(0xffffffffffffffff) (async) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4a20, @loopback}, 0x10) (async) sendfile(r3, r4, 0x0, 0x90000) recvmsg(r3, &(0x7f0000000580)={0x0, 0x41, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4084, 0xfffffe1f}], 0x6, 0x0, 0xfffffffffffffcc9}, 0x700) (async) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, 0x0) [ 592.589944][ T27] audit: type=1800 audit(1664078790.023:259): pid=11351 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=".pending_reads" dev="sda1" ino=1156 res=0 errno=0 04:06:30 executing program 3: r0 = syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="10000000000001000100050000000000ffffff7f200000005a4d", 0x1a, 0x400}, {&(0x7f0000000440)="ff00feffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff00ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff03f0ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffe1ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed41034844d6de4005", 0x809, 0x800}, {0x0, 0x0, 0x1400}], 0x0, &(0x7f0000000500)=ANY=[], 0x0) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x4040, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r1, 0xc0185879, &(0x7f0000000040)={@id={0x2, 0x0, @auto="001006040000000f00000400"}}) r2 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x4040, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r2, 0xc0185879, &(0x7f0000000040)={@id={0x2, 0x0, @auto="001006040000000f00000400"}}) pidfd_getfd(r1, r2, 0x0) symlinkat(&(0x7f0000000180)='./file0\x00', r0, &(0x7f0000001900)='./file0\x00') syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @remote, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @random="5c4b2e476b8b", @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @loopback}}}}, 0x0) r3 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$binfmt_misc(r3, &(0x7f0000000100)={'syz0', "48cc4d419eca79c7f392"}, 0xe) pivot_root(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file0\x00') ioctl$PTP_SYS_OFFSET(0xffffffffffffffff, 0x43403d05, &(0x7f0000000c80)={0x17}) 04:06:30 executing program 2: ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f0000000000)={0x0, 0x2}) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_USER_CONFIRM_NEG_REPLY}}, 0x7) ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f0000000000)={0x0, 0x2}) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_USER_CONFIRM_NEG_REPLY}}, 0x7) (async) 04:06:30 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x4c3d, 0xfffffffffffffffd) [ 592.664456][ T9] kworker/u4:0: attempt to access beyond end of device [ 592.664456][ T9] loop3: rw=1, sector=44, nr_sectors = 2 limit=20 [ 592.697562][ T9] Buffer I/O error on dev loop3, logical block 22, lost async page write [ 592.734406][ T9] kworker/u4:0: attempt to access beyond end of device [ 592.734406][ T9] loop3: rw=1, sector=46, nr_sectors = 2 limit=20 [ 592.767957][ T9] Buffer I/O error on dev loop3, logical block 23, lost async page write [ 592.826265][T11371] loop3: detected capacity change from 0 to 20 [ 592.830507][T10612] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 592.842547][ T142] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 592.846801][ T27] audit: type=1800 audit(1664078790.283:260): pid=11371 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=".pending_reads" dev="sda1" ino=1166 res=0 errno=0 [ 592.877772][ T27] audit: type=1800 audit(1664078790.313:261): pid=11371 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=".pending_reads" dev="sda1" ino=1166 res=0 errno=0 [ 592.919448][ T12] kworker/u4:1: attempt to access beyond end of device [ 592.919448][ T12] loop3: rw=1, sector=44, nr_sectors = 2 limit=20 [ 592.933371][ T12] Buffer I/O error on dev loop3, logical block 22, lost async page write [ 592.944223][ T12] kworker/u4:1: attempt to access beyond end of device [ 592.944223][ T12] loop3: rw=1, sector=46, nr_sectors = 2 limit=20 [ 592.959212][ T12] Buffer I/O error on dev loop3, logical block 23, lost async page write [ 593.053204][ T3691] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 593.113310][ T142] usb 2-1: Using ep0 maxpacket: 16 [ 593.242966][ T142] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 593.312816][ T3691] usb 5-1: Using ep0 maxpacket: 16 [ 593.414764][ T142] usb 2-1: New USB device found, idVendor=15c2, idProduct=0040, bcdDevice=80.f3 [ 593.423861][ T142] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 593.431840][ T142] usb 2-1: Product: syz [ 593.436444][ T3691] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 593.446561][ T142] usb 2-1: Manufacturer: syz [ 593.451185][ T142] usb 2-1: SerialNumber: syz [ 593.464343][ T142] usb 2-1: config 0 descriptor?? [ 593.515749][ T142] input: iMON Panel, Knob and Mouse(15c2:0040) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input187 [ 593.643100][ T3691] usb 5-1: New USB device found, idVendor=15c2, idProduct=0040, bcdDevice=80.f3 [ 593.652188][ T3691] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 593.660542][ T3691] usb 5-1: Product: syz [ 593.664776][ T3691] usb 5-1: Manufacturer: syz [ 593.669457][ T3691] usb 5-1: SerialNumber: syz [ 593.675572][ T3691] usb 5-1: config 0 descriptor?? [ 593.714843][ T3691] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 593.722574][ T3691] imon 5-1:0.0: unable to initialize intf0, err -19 [ 593.729236][ T3691] imon:imon_probe: failed to initialize context! [ 593.736029][ T3691] imon 5-1:0.0: unable to register, err -19 [ 593.812793][ T142] rc_core: IR keymap rc-imon-pad not found [ 593.818652][ T142] Registered IR keymap rc-empty [ 593.823817][ T142] imon 2-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 593.834290][ T142] imon 2-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 593.973515][ T142] rc rc0: iMON Remote (15c2:0040) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 593.984596][ T142] input: iMON Remote (15c2:0040) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input188 [ 593.998875][ T142] imon 2-1:0.0: iMON device (15c2:0040, intf0) on usb<2:63> initialized [ 594.157393][ T15] usb 2-1: USB disconnect, device number 63 04:06:33 executing program 2: syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xc8}, "4ba1dde93ca6730392ffb656fa42b457bab095a285054b70b2dd589deb012c780969324ee279f9b8f182ef376efc59dddf9ead4bd5a5ab3c285638f55eb530b1bf8ea91bdaef9f2a9ad98ba442c14bcae7fbbedd811d86b01b6a4379124925ddcc5a021c5aaa3a8e26e5fff77ed1d706d48c2c52825b347767f6"}, 0x7e) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x11}, "a9bb070dda9f2289ab7b77dee580caf3a7"}, 0x15) 04:06:33 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time_recursive\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001400)={&(0x7f00000013c0)='ext4_es_find_extent_range_enter\x00'}, 0x10) (async) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r1, 0xff, 0x0, 0x0, 0x0) (async) syncfs(r1) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r2, &(0x7f0000000000), 0x20b000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000200)='illinois\x00', 0x9) (async) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000000)=0x2805, 0x4) (async) r4 = openat(0xffffffffffffffff, &(0x7f00000002c0)='/proc/self/exe\x00', 0x0, 0x5) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000280)={0x0, &(0x7f00000001c0)}, 0x10) (async) close(0xffffffffffffffff) (async) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4a20, @loopback}, 0x10) sendfile(r3, r4, 0x0, 0x90000) (async) recvmsg(r3, &(0x7f0000000580)={0x0, 0x41, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4084, 0xfffffe1f}], 0x6, 0x0, 0xfffffffffffffcc9}, 0x700) (async) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, 0x0) 04:06:33 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x4c3e, 0xfffffffffffffffd) 04:06:33 executing program 3: r0 = syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="10000000000001000100050000000000ffffff7f200000005a4d", 0x1a, 0x400}, {&(0x7f0000000440)="ff00feffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff00ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff03f0ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffe1ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed41034844d6de4005", 0x809, 0x800}, {0x0, 0x0, 0x1400}], 0x0, &(0x7f0000000500)=ANY=[], 0x0) (async, rerun: 64) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x4040, 0x0) (rerun: 64) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r1, 0xc0185879, &(0x7f0000000040)={@id={0x2, 0x0, @auto="001006040000000f00000400"}}) r2 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x4040, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r2, 0xc0185879, &(0x7f0000000040)={@id={0x2, 0x0, @auto="001006040000000f00000400"}}) (async) pidfd_getfd(r1, r2, 0x0) (async, rerun: 64) symlinkat(&(0x7f0000000180)='./file0\x00', r0, &(0x7f0000001900)='./file0\x00') (rerun: 64) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @remote, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @random="5c4b2e476b8b", @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @loopback}}}}, 0x0) (async) r3 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$binfmt_misc(r3, &(0x7f0000000100)={'syz0', "48cc4d419eca79c7f392"}, 0xe) pivot_root(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file0\x00') (async) ioctl$PTP_SYS_OFFSET(0xffffffffffffffff, 0x43403d05, &(0x7f0000000c80)={0x17}) 04:06:33 executing program 1: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000007c0)=ANY=[@ANYBLOB="1201000079201010c2154000f3800102030109021b0001000000000904000001e104550009058b0b40"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x500000000000000) 04:06:33 executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000007c0)=ANY=[@ANYBLOB="1201000079201010c2154000f3800102030109021b00010000000009040000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) [ 595.622958][ T3691] usb 5-1: USB disconnect, device number 48 04:06:33 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x4c41, 0xfffffffffffffffd) 04:06:33 executing program 2: syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xc8}, "4ba1dde93ca6730392ffb656fa42b457bab095a285054b70b2dd589deb012c780969324ee279f9b8f182ef376efc59dddf9ead4bd5a5ab3c285638f55eb530b1bf8ea91bdaef9f2a9ad98ba442c14bcae7fbbedd811d86b01b6a4379124925ddcc5a021c5aaa3a8e26e5fff77ed1d706d48c2c52825b347767f6"}, 0x7e) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x11}, "a9bb070dda9f2289ab7b77dee580caf3a7"}, 0x15) 04:06:33 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time_recursive\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001400)={&(0x7f00000013c0)='ext4_es_find_extent_range_enter\x00'}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r1, 0xff, 0x0, 0x0, 0x0) syncfs(r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r2, &(0x7f0000000000), 0x20b000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000200)='illinois\x00', 0x9) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000000)=0x2805, 0x4) r4 = openat(0xffffffffffffffff, &(0x7f00000002c0)='/proc/self/exe\x00', 0x0, 0x5) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x7, &(0x7f0000000280)=[{0x1, 0x4, 0x1, 0x2}, {0x6, 0x21, 0x0, 0x3f}, {0xe0, 0x9, 0x2, 0x6e6}, {0x4, 0x1f, 0x7, 0x200}, {0x1, 0x7e, 0x9, 0xbc6}, {0x3, 0x9, 0x6, 0x1003}, {0x1, 0x6, 0x9, 0x10000}]}, 0x10) close(0xffffffffffffffff) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e20, @loopback}, 0x10) sendfile(r3, r4, 0x0, 0x90000) recvmsg(r3, &(0x7f0000000580)={0x0, 0x41, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4084, 0xfffffe1f}], 0x6, 0x0, 0xfffffffffffffcc9}, 0x700) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, 0x0) [ 595.682466][T11386] loop3: detected capacity change from 0 to 20 [ 595.692764][ T27] audit: type=1800 audit(1664078793.123:262): pid=11387 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=".pending_reads" dev="sda1" ino=1178 res=0 errno=0 04:06:33 executing program 2: syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xc8}, "4ba1dde93ca6730392ffb656fa42b457bab095a285054b70b2dd589deb012c780969324ee279f9b8f182ef376efc59dddf9ead4bd5a5ab3c285638f55eb530b1bf8ea91bdaef9f2a9ad98ba442c14bcae7fbbedd811d86b01b6a4379124925ddcc5a021c5aaa3a8e26e5fff77ed1d706d48c2c52825b347767f6"}, 0x7e) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x11}, "a9bb070dda9f2289ab7b77dee580caf3a7"}, 0x15) [ 595.759209][ T27] audit: type=1800 audit(1664078793.123:263): pid=11387 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=".pending_reads" dev="sda1" ino=1178 res=0 errno=0 04:06:33 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x4c42, 0xfffffffffffffffd) 04:06:33 executing program 3: r0 = syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="10000000000001000100050000000000ffffff7f200000005a4d", 0x1a, 0x400}, {&(0x7f0000000440)="ff00feffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff00ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff03f0ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffe1ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed41034844d6de4005", 0x809, 0x800}, {0x0, 0x0, 0x1400}], 0x0, &(0x7f0000000500)=ANY=[], 0x0) (async, rerun: 32) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x4040, 0x0) (rerun: 32) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r1, 0xc0185879, &(0x7f0000000040)={@id={0x2, 0x0, @auto="001006040000000f00000400"}}) (async, rerun: 32) r2 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x4040, 0x0) (rerun: 32) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r2, 0xc0185879, &(0x7f0000000040)={@id={0x2, 0x0, @auto="001006040000000f00000400"}}) pidfd_getfd(r1, r2, 0x0) (async, rerun: 32) symlinkat(&(0x7f0000000180)='./file0\x00', r0, &(0x7f0000001900)='./file0\x00') (async, rerun: 32) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @remote, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @random="5c4b2e476b8b", @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @loopback}}}}, 0x0) r3 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$binfmt_misc(r3, &(0x7f0000000100)={'syz0', "48cc4d419eca79c7f392"}, 0xe) (async) pivot_root(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file0\x00') (async) ioctl$PTP_SYS_OFFSET(0xffffffffffffffff, 0x43403d05, &(0x7f0000000c80)={0x17}) 04:06:33 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time_recursive\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001400)={&(0x7f00000013c0)='ext4_es_find_extent_range_enter\x00'}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r1, 0xff, 0x0, 0x0, 0x0) syncfs(r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r2, &(0x7f0000000000), 0x20b000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000200)='illinois\x00', 0x9) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000000)=0x2805, 0x4) r4 = openat(0xffffffffffffffff, &(0x7f00000002c0)='/proc/self/exe\x00', 0x0, 0x5) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x7, &(0x7f0000000280)=[{0x1, 0x4, 0x1, 0x2}, {0x6, 0x21, 0x0, 0x3f}, {0xe0, 0x9, 0x2, 0x6e6}, {0x4, 0x1f, 0x7, 0x200}, {0x1, 0x7e, 0x9, 0xbc6}, {0x3, 0x9, 0x6, 0x1003}, {0x1, 0x6, 0x9, 0x10000}]}, 0x10) close(0xffffffffffffffff) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e20, @loopback}, 0x10) sendfile(r3, r4, 0x0, 0x90000) recvmsg(r3, &(0x7f0000000580)={0x0, 0x41, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4084, 0xfffffe1f}], 0x6, 0x0, 0xfffffffffffffcc9}, 0x700) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time_recursive\x00', 0x26e1, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001400)={&(0x7f00000013c0)='ext4_es_find_extent_range_enter\x00'}, 0x10) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) getsockopt(r1, 0xff, 0x0, 0x0, 0x0) (async) syncfs(r1) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async) write$cgroup_type(r2, &(0x7f0000000000), 0x20b000) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000200)='illinois\x00', 0x9) (async) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10) (async) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000000)=0x2805, 0x4) (async) openat(0xffffffffffffffff, &(0x7f00000002c0)='/proc/self/exe\x00', 0x0, 0x5) (async) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x7, &(0x7f0000000280)=[{0x1, 0x4, 0x1, 0x2}, {0x6, 0x21, 0x0, 0x3f}, {0xe0, 0x9, 0x2, 0x6e6}, {0x4, 0x1f, 0x7, 0x200}, {0x1, 0x7e, 0x9, 0xbc6}, {0x3, 0x9, 0x6, 0x1003}, {0x1, 0x6, 0x9, 0x10000}]}, 0x10) (async) close(0xffffffffffffffff) (async) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e20, @loopback}, 0x10) (async) sendfile(r3, r4, 0x0, 0x90000) (async) recvmsg(r3, &(0x7f0000000580)={0x0, 0x41, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4084, 0xfffffe1f}], 0x6, 0x0, 0xfffffffffffffcc9}, 0x700) (async) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, 0x0) (async) 04:06:33 executing program 2: syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x30}, "286a073aaa47332a7d6a195937da65396efccddc64bd0005c784353bbe2adbe39c6c56e046b5f844eb31fae697ea81581cd810a2d75cd8de03758f6039431c7dd1f6"}, 0x46) [ 595.872327][ T27] audit: type=1800 audit(1664078793.123:264): pid=11387 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=".pending_reads" dev="sda1" ino=1178 res=0 errno=0 04:06:33 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x4c43, 0xfffffffffffffffd) 04:06:33 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time_recursive\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001400)={&(0x7f00000013c0)='ext4_es_find_extent_range_enter\x00'}, 0x10) (async) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r1, 0xff, 0x0, 0x0, 0x0) syncfs(r1) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r2, &(0x7f0000000000), 0x20b000) (async, rerun: 32) r3 = socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 32) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000200)='illinois\x00', 0x9) (async) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10) (async) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000000)=0x2805, 0x4) r4 = openat(0xffffffffffffffff, &(0x7f00000002c0)='/proc/self/exe\x00', 0x0, 0x5) (async) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x7, &(0x7f0000000280)=[{0x1, 0x4, 0x1, 0x2}, {0x6, 0x21, 0x0, 0x3f}, {0xe0, 0x9, 0x2, 0x6e6}, {0x4, 0x1f, 0x7, 0x200}, {0x1, 0x7e, 0x9, 0xbc6}, {0x3, 0x9, 0x6, 0x1003}, {0x1, 0x6, 0x9, 0x10000}]}, 0x10) (async) close(0xffffffffffffffff) (async, rerun: 64) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e20, @loopback}, 0x10) (rerun: 64) sendfile(r3, r4, 0x0, 0x90000) (async) recvmsg(r3, &(0x7f0000000580)={0x0, 0x41, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4084, 0xfffffe1f}], 0x6, 0x0, 0xfffffffffffffcc9}, 0x700) (async) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, 0x0) [ 595.916179][ T9814] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 595.950716][T11411] loop3: detected capacity change from 0 to 20 [ 595.955799][ T9814] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 595.972737][ T23] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 595.980498][ T27] audit: type=1800 audit(1664078793.123:265): pid=11387 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=".pending_reads" dev="sda1" ino=1178 res=0 errno=0 [ 595.986596][ T9814] Buffer I/O error on dev loop3, logical block 0, async page read [ 596.045209][ T27] audit: type=1800 audit(1664078793.123:266): pid=11387 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=".pending_reads" dev="sda1" ino=1178 res=0 errno=0 [ 596.089438][ T27] audit: type=1800 audit(1664078793.133:267): pid=11387 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=".pending_reads" dev="sda1" ino=1178 res=0 errno=0 [ 596.129157][ T27] audit: type=1800 audit(1664078793.133:268): pid=11387 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=".pending_reads" dev="sda1" ino=1178 res=0 errno=0 [ 596.152386][ T27] audit: type=1800 audit(1664078793.133:269): pid=11387 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=".pending_reads" dev="sda1" ino=1178 res=0 errno=0 [ 596.175599][ T27] audit: type=1800 audit(1664078793.133:270): pid=11387 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=".pending_reads" dev="sda1" ino=1178 res=0 errno=0 [ 596.198656][ T3691] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 596.207319][ T27] audit: type=1800 audit(1664078793.143:271): pid=11387 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=".pending_reads" dev="sda1" ino=1178 res=0 errno=0 [ 596.252778][ T23] usb 2-1: Using ep0 maxpacket: 16 [ 596.372879][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 596.462935][ T3691] usb 5-1: Using ep0 maxpacket: 16 [ 596.543078][ T23] usb 2-1: New USB device found, idVendor=15c2, idProduct=0040, bcdDevice=80.f3 [ 596.552129][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 596.560691][ T23] usb 2-1: Product: syz [ 596.564981][ T23] usb 2-1: Manufacturer: syz [ 596.569728][ T23] usb 2-1: SerialNumber: syz [ 596.576959][ T23] usb 2-1: config 0 descriptor?? [ 596.593237][ T3691] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 596.615585][ T23] input: iMON Panel, Knob and Mouse(15c2:0040) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input189 [ 596.762834][ T3691] usb 5-1: New USB device found, idVendor=15c2, idProduct=0040, bcdDevice=80.f3 [ 596.771910][ T3691] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 596.783931][ T3691] usb 5-1: Product: syz [ 596.788089][ T3691] usb 5-1: Manufacturer: syz [ 596.794769][ T3691] usb 5-1: SerialNumber: syz [ 596.800708][ T3691] usb 5-1: config 0 descriptor?? [ 596.844767][ T3691] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 596.859158][ T3691] imon 5-1:0.0: unable to initialize intf0, err -19 [ 596.865848][ T3691] imon:imon_probe: failed to initialize context! [ 596.872225][ T3691] imon 5-1:0.0: unable to register, err -19 [ 596.912875][ T23] rc_core: IR keymap rc-imon-pad not found [ 596.918863][ T23] Registered IR keymap rc-empty [ 596.923887][ T23] imon 2-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 596.934541][ T23] imon 2-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 597.074370][ T23] rc rc0: iMON Remote (15c2:0040) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 597.085117][ T23] input: iMON Remote (15c2:0040) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input190 [ 597.098615][ T23] imon 2-1:0.0: iMON device (15c2:0040, intf0) on usb<2:64> initialized [ 597.258743][ T23] usb 2-1: USB disconnect, device number 64 04:06:35 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time_recursive\x00', 0x26e1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x4, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r0, @ANYRESDEC=r1, @ANYRES8=r1, @ANYRES32=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0xffffffffffffff71, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001400)={&(0x7f00000013c0)='ext4_es_find_extent_range_enter\x00'}, 0x10) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r2, 0xff, 0x0, 0x0, 0x0) syncfs(r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r3, &(0x7f0000000000), 0x20b000) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000200)='illinois\x00', 0x9) bind$inet(r4, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r4, 0x6, 0x2, &(0x7f0000000000)=0x2805, 0x4) r5 = openat(0xffffffffffffffff, &(0x7f00000002c0)='/proc/self/exe\x00', 0x20000, 0x5) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000280)={0x0, &(0x7f00000001c0)}, 0x10) close(0xffffffffffffffff) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e20, @loopback}, 0x10) sendfile(r4, r5, 0x0, 0x90000) recvmsg(r4, &(0x7f0000000580)={0x0, 0x41, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4084, 0xfffffe1f}], 0x6, 0x0, 0xfffffffffffffcc9}, 0x700) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, 0x0) 04:06:36 executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000007c0)=ANY=[@ANYBLOB="1201000079201010c2154000f3800102030109021b00010000000009040000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 04:06:36 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x4c44, 0xfffffffffffffffd) 04:06:36 executing program 3: r0 = syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="10000000000001000100050000000000ffffff7f200000005a4d", 0x1a, 0x400}, {&(0x7f0000000440)="ff00feffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff00ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff03f0ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffe1ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed41034844d6de4005", 0x809, 0x800}, {0x0, 0x0, 0x1400}], 0x0, &(0x7f0000000500)=ANY=[], 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) io_pgetevents(0x0, 0xee, 0x8, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000080)={r1, r2+60000000}, &(0x7f0000000100)={&(0x7f00000000c0)={[0x8000000000000000]}, 0x8}) symlinkat(&(0x7f0000002940)='./file0\x00', r0, &(0x7f0000001900)='./file1\x00') 04:06:36 executing program 2: syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x30}, "286a073aaa47332a7d6a195937da65396efccddc64bd0005c784353bbe2adbe39c6c56e046b5f844eb31fae697ea81581cd810a2d75cd8de03758f6039431c7dd1f6"}, 0x46) 04:06:36 executing program 1: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000007c0)=ANY=[@ANYBLOB="1201000079201010c2154000f3800102030109021b0001000000000904000001e104550009058b0b40"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x600000000000000) 04:06:36 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time_recursive\x00', 0x26e1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x4, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r0, @ANYRESDEC=r1, @ANYRES8=r1, @ANYRES32=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0xffffffffffffff71, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001400)={&(0x7f00000013c0)='ext4_es_find_extent_range_enter\x00'}, 0x10) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r2, 0xff, 0x0, 0x0, 0x0) syncfs(r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r3, &(0x7f0000000000), 0x20b000) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000200)='illinois\x00', 0x9) bind$inet(r4, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r4, 0x6, 0x2, &(0x7f0000000000)=0x2805, 0x4) r5 = openat(0xffffffffffffffff, &(0x7f00000002c0)='/proc/self/exe\x00', 0x20000, 0x5) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000280)={0x0, &(0x7f00000001c0)}, 0x10) close(0xffffffffffffffff) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e20, @loopback}, 0x10) sendfile(r4, r5, 0x0, 0x90000) recvmsg(r4, &(0x7f0000000580)={0x0, 0x41, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4084, 0xfffffe1f}], 0x6, 0x0, 0xfffffffffffffcc9}, 0x700) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time_recursive\x00', 0x26e1, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x4, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r0, @ANYRESDEC=r1, @ANYRES8=r1, @ANYRES32=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0xffffffffffffff71, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001400)={&(0x7f00000013c0)='ext4_es_find_extent_range_enter\x00'}, 0x10) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) getsockopt(r2, 0xff, 0x0, 0x0, 0x0) (async) syncfs(r2) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async) write$cgroup_type(r3, &(0x7f0000000000), 0x20b000) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000200)='illinois\x00', 0x9) (async) bind$inet(r4, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10) (async) setsockopt$inet_tcp_int(r4, 0x6, 0x2, &(0x7f0000000000)=0x2805, 0x4) (async) openat(0xffffffffffffffff, &(0x7f00000002c0)='/proc/self/exe\x00', 0x20000, 0x5) (async) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000280)={0x0, &(0x7f00000001c0)}, 0x10) (async) close(0xffffffffffffffff) (async) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e20, @loopback}, 0x10) (async) sendfile(r4, r5, 0x0, 0x90000) (async) recvmsg(r4, &(0x7f0000000580)={0x0, 0x41, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4084, 0xfffffe1f}], 0x6, 0x0, 0xfffffffffffffcc9}, 0x700) (async) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, 0x0) (async) 04:06:36 executing program 2: syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x30}, "286a073aaa47332a7d6a195937da65396efccddc64bd0005c784353bbe2adbe39c6c56e046b5f844eb31fae697ea81581cd810a2d75cd8de03758f6039431c7dd1f6"}, 0x46) [ 598.697738][ T3778] usb 5-1: USB disconnect, device number 49 04:06:36 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x4c45, 0xfffffffffffffffd) 04:06:36 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time_recursive\x00', 0x26e1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x4, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r0, @ANYRESDEC=r1, @ANYRES8=r1, @ANYRES32=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0xffffffffffffff71, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001400)={&(0x7f00000013c0)='ext4_es_find_extent_range_enter\x00'}, 0x10) (async) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r2, 0xff, 0x0, 0x0, 0x0) syncfs(r2) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r3, &(0x7f0000000000), 0x20b000) (async) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000200)='illinois\x00', 0x9) (async) bind$inet(r4, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r4, 0x6, 0x2, &(0x7f0000000000)=0x2805, 0x4) (async) r5 = openat(0xffffffffffffffff, &(0x7f00000002c0)='/proc/self/exe\x00', 0x20000, 0x5) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000280)={0x0, &(0x7f00000001c0)}, 0x10) (async) close(0xffffffffffffffff) (async) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e20, @loopback}, 0x10) (async, rerun: 32) sendfile(r4, r5, 0x0, 0x90000) (async, rerun: 32) recvmsg(r4, &(0x7f0000000580)={0x0, 0x41, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4084, 0xfffffe1f}], 0x6, 0x0, 0xfffffffffffffcc9}, 0x700) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, 0x0) [ 598.742889][T11436] loop3: detected capacity change from 0 to 20 04:06:36 executing program 3: r0 = syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="10000000000001000100050000000000ffffff7f200000005a4d", 0x1a, 0x400}, {&(0x7f0000000440)="ff00feffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff00ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff03f0ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffe1ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed41034844d6de4005", 0x809, 0x800}, {0x0, 0x0, 0x1400}], 0x0, &(0x7f0000000500)=ANY=[], 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) io_pgetevents(0x0, 0xee, 0x8, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000080)={r1, r2+60000000}, &(0x7f0000000100)={&(0x7f00000000c0)={[0x8000000000000000]}, 0x8}) symlinkat(&(0x7f0000002940)='./file0\x00', r0, &(0x7f0000001900)='./file1\x00') syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="10000000000001000100050000000000ffffff7f200000005a4d", 0x1a, 0x400}, {&(0x7f0000000440)="ff00feffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff00ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff03f0ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffe1ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed41034844d6de4005", 0x809, 0x800}, {0x0, 0x0, 0x1400}], 0x0, &(0x7f0000000500)=ANY=[], 0x0) (async) clock_gettime(0x0, &(0x7f0000000000)) (async) io_pgetevents(0x0, 0xee, 0x8, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000080)={r1, r2+60000000}, &(0x7f0000000100)={&(0x7f00000000c0)={[0x8000000000000000]}, 0x8}) (async) symlinkat(&(0x7f0000002940)='./file0\x00', r0, &(0x7f0000001900)='./file1\x00') (async) 04:06:36 executing program 2: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x4040, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f00000000c0)=0x2) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r0, 0xc0185879, &(0x7f0000000040)={@id={0x2, 0x0, @auto="001000000400"}}) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x100000) 04:06:36 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x4c46, 0xfffffffffffffffd) [ 598.821746][ T9] kworker/u4:0: attempt to access beyond end of device [ 598.821746][ T9] loop3: rw=1, sector=44, nr_sectors = 2 limit=20 [ 598.849225][T11454] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 598.882794][ T9] Buffer I/O error on dev loop3, logical block 22, lost async page write [ 598.917594][ T9] kworker/u4:0: attempt to access beyond end of device [ 598.917594][ T9] loop3: rw=1, sector=46, nr_sectors = 2 limit=20 [ 598.971164][ T9] Buffer I/O error on dev loop3, logical block 23, lost async page write [ 599.033092][ T3694] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 599.037642][T11462] loop3: detected capacity change from 0 to 20 [ 599.051219][ T9814] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 599.063939][ T9814] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 599.074266][ T9814] Buffer I/O error on dev loop3, logical block 0, async page read [ 599.082389][ T9814] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 599.098157][ T9814] Buffer I/O error on dev loop3, logical block 0, async page read [ 599.183327][ T3778] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 599.302868][ T3694] usb 2-1: Using ep0 maxpacket: 16 [ 599.436214][ T3694] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 599.447261][ T3778] usb 5-1: Using ep0 maxpacket: 16 [ 599.572954][ T3778] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 599.632944][ T3694] usb 2-1: New USB device found, idVendor=15c2, idProduct=0040, bcdDevice=80.f3 [ 599.642024][ T3694] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 599.653919][ T3694] usb 2-1: Product: syz [ 599.658083][ T3694] usb 2-1: Manufacturer: syz [ 599.665079][ T3694] usb 2-1: SerialNumber: syz [ 599.671059][ T3694] usb 2-1: config 0 descriptor?? [ 599.716342][ T3694] input: iMON Panel, Knob and Mouse(15c2:0040) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input191 [ 599.792872][ T3778] usb 5-1: New USB device found, idVendor=15c2, idProduct=0040, bcdDevice=80.f3 [ 599.801937][ T3778] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 599.810012][ T3778] usb 5-1: Product: syz [ 599.817817][ T3778] usb 5-1: Manufacturer: syz [ 599.822404][ T3778] usb 5-1: SerialNumber: syz [ 599.828672][ T3778] usb 5-1: config 0 descriptor?? [ 599.895035][ T3778] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 599.902717][ T3778] imon 5-1:0.0: unable to initialize intf0, err -19 [ 599.909326][ T3778] imon:imon_probe: failed to initialize context! [ 599.915921][ T3778] imon 5-1:0.0: unable to register, err -19 [ 599.992738][ T3694] rc_core: IR keymap rc-imon-pad not found [ 599.998876][ T3694] Registered IR keymap rc-empty [ 600.003893][ T3694] imon 2-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 600.014077][ T3694] imon 2-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 600.155438][ T3694] rc rc0: iMON Remote (15c2:0040) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 600.166188][ T3694] input: iMON Remote (15c2:0040) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input192 [ 600.179214][ T3694] imon 2-1:0.0: iMON device (15c2:0040, intf0) on usb<2:65> initialized [ 600.338363][ T142] usb 2-1: USB disconnect, device number 65 04:06:39 executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000007c0)=ANY=[@ANYBLOB="1201000079201010c2154000f3800102030109021b0001000000000904000001e1045500"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 04:06:39 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time_recursive\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001400)={&(0x7f00000013c0)='ext4_es_find_extent_range_enter\x00'}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r1, 0xff, 0x0, 0x0, 0x0) syncfs(r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r2, &(0x7f0000000000), 0x20b000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='illinois\x00', 0x9) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000000)=0x2805, 0x4) r4 = openat(0xffffffffffffffff, &(0x7f00000002c0)='/proc/self/exe\x00', 0x0, 0x5) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000280)={0x0, &(0x7f00000001c0)}, 0x10) close(0xffffffffffffffff) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e20, @loopback}, 0x10) sendfile(r3, r4, 0x0, 0x90000) recvmsg(r3, &(0x7f0000000580)={0x0, 0x41, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4084, 0xfffffe1f}], 0x6, 0x0, 0xfffffffffffffcc9}, 0x700) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, 0x0) 04:06:39 executing program 2: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x4040, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f00000000c0)=0x2) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r0, 0xc0185879, &(0x7f0000000040)={@id={0x2, 0x0, @auto="001000000400"}}) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x100000) openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x4040, 0x0) (async) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f00000000c0)=0x2) (async) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r0, 0xc0185879, &(0x7f0000000040)={@id={0x2, 0x0, @auto="001000000400"}}) (async) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x100000) (async) 04:06:39 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x4c47, 0xfffffffffffffffd) 04:06:39 executing program 3: r0 = syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="10000000000001000100050000000000ffffff7f200000005a4d", 0x1a, 0x400}, {&(0x7f0000000440)="ff00feffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff00ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff03f0ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffe1ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed41034844d6de4005", 0x809, 0x800}, {0x0, 0x0, 0x1400}], 0x0, &(0x7f0000000500)=ANY=[], 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) io_pgetevents(0x0, 0xee, 0x8, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000080)={r1, r2+60000000}, &(0x7f0000000100)={&(0x7f00000000c0)={[0x8000000000000000]}, 0x8}) (async) symlinkat(&(0x7f0000002940)='./file0\x00', r0, &(0x7f0000001900)='./file1\x00') 04:06:39 executing program 1: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000007c0)=ANY=[@ANYBLOB="1201000079201010c2154000f3800102030109021b0001000000000904000001e104550009058b0b40"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x700000000000000) [ 601.763212][ T3694] usb 5-1: USB disconnect, device number 50 [ 601.797974][ T27] kauditd_printk_skb: 60 callbacks suppressed 04:06:39 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x4c48, 0xfffffffffffffffd) 04:06:39 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time_recursive\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001400)={&(0x7f00000013c0)='ext4_es_find_extent_range_enter\x00'}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r1, 0xff, 0x0, 0x0, 0x0) syncfs(r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r2, &(0x7f0000000000), 0x20b000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='illinois\x00', 0x9) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000000)=0x2805, 0x4) r4 = openat(0xffffffffffffffff, &(0x7f00000002c0)='/proc/self/exe\x00', 0x0, 0x5) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000280)={0x0, &(0x7f00000001c0)}, 0x10) close(0xffffffffffffffff) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e20, @loopback}, 0x10) sendfile(r3, r4, 0x0, 0x90000) recvmsg(r3, &(0x7f0000000580)={0x0, 0x41, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4084, 0xfffffe1f}], 0x6, 0x0, 0xfffffffffffffcc9}, 0x700) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time_recursive\x00', 0x26e1, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001400)={&(0x7f00000013c0)='ext4_es_find_extent_range_enter\x00'}, 0x10) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) getsockopt(r1, 0xff, 0x0, 0x0, 0x0) (async) syncfs(r1) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async) write$cgroup_type(r2, &(0x7f0000000000), 0x20b000) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='illinois\x00', 0x9) (async) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10) (async) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000000)=0x2805, 0x4) (async) openat(0xffffffffffffffff, &(0x7f00000002c0)='/proc/self/exe\x00', 0x0, 0x5) (async) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000280)={0x0, &(0x7f00000001c0)}, 0x10) (async) close(0xffffffffffffffff) (async) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e20, @loopback}, 0x10) (async) sendfile(r3, r4, 0x0, 0x90000) (async) recvmsg(r3, &(0x7f0000000580)={0x0, 0x41, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4084, 0xfffffe1f}], 0x6, 0x0, 0xfffffffffffffcc9}, 0x700) (async) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, 0x0) (async) [ 601.797989][ T27] audit: type=1800 audit(1664078799.233:332): pid=11479 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name=".pending_reads" dev="sda1" ino=1178 res=0 errno=0 [ 601.833443][T11479] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 601.833915][T11480] loop3: detected capacity change from 0 to 20 04:06:39 executing program 2: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x4040, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f00000000c0)=0x2) (async) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r0, 0xc0185879, &(0x7f0000000040)={@id={0x2, 0x0, @auto="001000000400"}}) (async) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x100000) 04:06:39 executing program 3: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="10000000000001000100050000000000ffffff7f200000005a4d", 0x1a, 0x400}, {&(0x7f0000000440)="ff00feffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff00ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff03f0ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffe1ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed41034844d6de4005", 0x809, 0x800}, {0x0, 0x0, 0x1400}], 0x0, &(0x7f0000000500)=ANY=[], 0x0) r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x4040, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r0, 0xc0185879, &(0x7f0000000040)={@id={0x2, 0x0, @auto="001006040000000f00000400"}}) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x4040, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r1, 0xc0185879, &(0x7f0000000040)={@id={0x2, 0x0, @auto="001006040000000f00000400"}}) renameat2(r0, 0xffffffffffffffff, r1, &(0x7f0000000000)='./file0\x00', 0x4) r2 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x4040, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r2, 0xc0185879, &(0x7f0000000040)={@id={0x2, 0x0, @auto="001006040000000f00000400"}}) symlinkat(&(0x7f00000000c0)='./file0\x00', r2, &(0x7f0000000100)='./file0\x00') 04:06:39 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x4c49, 0xfffffffffffffffd) 04:06:39 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time_recursive\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001400)={&(0x7f00000013c0)='ext4_es_find_extent_range_enter\x00'}, 0x10) (async) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r1, 0xff, 0x0, 0x0, 0x0) (async) syncfs(r1) (async, rerun: 64) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (rerun: 64) write$cgroup_type(r2, &(0x7f0000000000), 0x20b000) (async, rerun: 32) r3 = socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 32) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='illinois\x00', 0x9) (async, rerun: 32) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10) (rerun: 32) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000000)=0x2805, 0x4) (async) r4 = openat(0xffffffffffffffff, &(0x7f00000002c0)='/proc/self/exe\x00', 0x0, 0x5) (async) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000280)={0x0, &(0x7f00000001c0)}, 0x10) (async) close(0xffffffffffffffff) (async, rerun: 32) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e20, @loopback}, 0x10) (rerun: 32) sendfile(r3, r4, 0x0, 0x90000) (async, rerun: 32) recvmsg(r3, &(0x7f0000000580)={0x0, 0x41, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4084, 0xfffffe1f}], 0x6, 0x0, 0xfffffffffffffcc9}, 0x700) (rerun: 32) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, 0x0) [ 602.052926][ T3779] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 602.060489][T11496] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 602.060610][ T27] audit: type=1800 audit(1664078799.493:333): pid=11496 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name=".pending_reads" dev="sda1" ino=1175 res=0 errno=0 [ 602.193586][T11499] loop3: detected capacity change from 0 to 20 [ 602.217256][ T27] audit: type=1800 audit(1664078799.653:334): pid=11499 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=".pending_reads" dev="sda1" ino=1177 res=0 errno=0 [ 602.252569][ T27] audit: type=1800 audit(1664078799.653:335): pid=11499 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=".pending_reads" dev="sda1" ino=1177 res=0 errno=0 [ 602.280756][ T27] audit: type=1800 audit(1664078799.653:336): pid=11499 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=".pending_reads" dev="sda1" ino=1177 res=0 errno=0 [ 602.362987][ T3779] usb 2-1: Using ep0 maxpacket: 16 [ 602.372783][ T3694] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 602.483088][ T3779] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 602.613008][ T3694] usb 5-1: Using ep0 maxpacket: 16 [ 602.653116][ T3779] usb 2-1: New USB device found, idVendor=15c2, idProduct=0040, bcdDevice=80.f3 [ 602.662185][ T3779] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 602.674441][ T3779] usb 2-1: Product: syz [ 602.678610][ T3779] usb 2-1: Manufacturer: syz [ 602.685733][ T3779] usb 2-1: SerialNumber: syz [ 602.696375][ T3779] usb 2-1: config 0 descriptor?? [ 602.735260][ T3779] input: iMON Panel, Knob and Mouse(15c2:0040) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input193 [ 602.747330][ T3694] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 602.758932][ T3694] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 602.932966][ T3694] usb 5-1: New USB device found, idVendor=15c2, idProduct=0040, bcdDevice=80.f3 [ 602.942084][ T3694] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 602.955345][ T3694] usb 5-1: Product: syz [ 602.959512][ T3694] usb 5-1: Manufacturer: syz [ 602.965700][ T3694] usb 5-1: SerialNumber: syz [ 602.984258][ T3694] usb 5-1: config 0 descriptor?? [ 603.025748][ T3694] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 603.033539][ T3779] rc_core: IR keymap rc-imon-pad not found [ 603.039373][ T3779] Registered IR keymap rc-empty [ 603.044638][ T3694] imon 5-1:0.0: unable to initialize intf0, err -19 [ 603.051243][ T3694] imon:imon_probe: failed to initialize context! [ 603.057877][ T3779] imon 2-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 603.068182][ T3694] imon 5-1:0.0: unable to register, err -19 [ 603.075715][ T3779] imon 2-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 603.193316][ T3779] rc rc0: iMON Remote (15c2:0040) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 603.209152][ T3779] input: iMON Remote (15c2:0040) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input194 [ 603.223117][ T3779] imon 2-1:0.0: iMON device (15c2:0040, intf0) on usb<2:66> initialized [ 603.376401][ T3779] usb 2-1: USB disconnect, device number 66 04:06:42 executing program 2: syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="7f6c1529c3bacb5ce399c7241af2d586a50d930284624a97284334ce2f88054ceacb16723caff92861f528c7f24db84b0d995d16de46e19c8fad9065470b199b26a20f974b5504f2e42ec2a9ea5eb815c66d712e48917b4e370a56e84baa"], 0x7) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) 04:06:42 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x4c4a, 0xfffffffffffffffd) 04:06:42 executing program 3: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="10000000000001000100050000000000ffffff7f200000005a4d", 0x1a, 0x400}, {&(0x7f0000000440)="ff00feffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff00ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff03f0ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffe1ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed41034844d6de4005", 0x809, 0x800}, {0x0, 0x0, 0x1400}], 0x0, &(0x7f0000000500)=ANY=[], 0x0) (async) r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x4040, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r0, 0xc0185879, &(0x7f0000000040)={@id={0x2, 0x0, @auto="001006040000000f00000400"}}) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x4040, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r1, 0xc0185879, &(0x7f0000000040)={@id={0x2, 0x0, @auto="001006040000000f00000400"}}) (async) renameat2(r0, 0xffffffffffffffff, r1, &(0x7f0000000000)='./file0\x00', 0x4) r2 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x4040, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r2, 0xc0185879, &(0x7f0000000040)={@id={0x2, 0x0, @auto="001006040000000f00000400"}}) (async) symlinkat(&(0x7f00000000c0)='./file0\x00', r2, &(0x7f0000000100)='./file0\x00') 04:06:42 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time_recursive\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001400)={&(0x7f00000013c0)='ext4_es_find_extent_range_enter\x00'}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r1, 0xff, 0x0, 0x0, 0x0) syncfs(r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r2, &(0x7f0000000000), 0x20b000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000200)='illinois\x00', 0x9) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000000)=0x2805, 0x4) r4 = openat(0xffffffffffffffff, &(0x7f00000002c0)='/proc/self/exe\x00', 0x0, 0x5) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000280)={0x0, &(0x7f00000001c0)}, 0x10) close(0xffffffffffffffff) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e20, @loopback}, 0x10) sendfile(r3, r4, 0x0, 0x90000) recvmsg(r3, &(0x7f0000000580)={0x0, 0x41, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4084, 0xfffffe1f}], 0x6, 0x0, 0xfffffffffffffcc9}, 0x700) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, 0x0) 04:06:42 executing program 1: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000007c0)=ANY=[@ANYBLOB="1201000079201010c2154000f3800102030109021b0001000000000904000001e104550009058b0b40"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x1f00000000000000) 04:06:42 executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000007c0)=ANY=[@ANYBLOB="1201000079201010c2154000f3800102030109021b0001000000000904000001e1045500"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) [ 604.844958][ T3779] usb 5-1: USB disconnect, device number 51 [ 604.882124][T11514] loop3: detected capacity change from 0 to 20 04:06:42 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x4c4b, 0xfffffffffffffffd) 04:06:42 executing program 2: syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="7f6c1529c3bacb5ce399c7241af2d586a50d930284624a97284334ce2f88054ceacb16723caff92861f528c7f24db84b0d995d16de46e19c8fad9065470b199b26a20f974b5504f2e42ec2a9ea5eb815c66d712e48917b4e370a56e84baa"], 0x7) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) 04:06:42 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time_recursive\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001400)={&(0x7f00000013c0)='ext4_es_find_extent_range_enter\x00'}, 0x10) (async) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r1, 0xff, 0x0, 0x0, 0x0) (async) syncfs(r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r2, &(0x7f0000000000), 0x20b000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000200)='illinois\x00', 0x9) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000000)=0x2805, 0x4) (async) r4 = openat(0xffffffffffffffff, &(0x7f00000002c0)='/proc/self/exe\x00', 0x0, 0x5) (async) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000280)={0x0, &(0x7f00000001c0)}, 0x10) close(0xffffffffffffffff) (async) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e20, @loopback}, 0x10) (async) sendfile(r3, r4, 0x0, 0x90000) recvmsg(r3, &(0x7f0000000580)={0x0, 0x41, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4084, 0xfffffe1f}], 0x6, 0x0, 0xfffffffffffffcc9}, 0x700) (async) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, 0x0) 04:06:42 executing program 3: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="10000000000001000100050000000000ffffff7f200000005a4d", 0x1a, 0x400}, {&(0x7f0000000440)="ff00feffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff00ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff03f0ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffe1ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed41034844d6de4005", 0x809, 0x800}, {0x0, 0x0, 0x1400}], 0x0, &(0x7f0000000500)=ANY=[], 0x0) r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x4040, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r0, 0xc0185879, &(0x7f0000000040)={@id={0x2, 0x0, @auto="001006040000000f00000400"}}) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x4040, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r1, 0xc0185879, &(0x7f0000000040)={@id={0x2, 0x0, @auto="001006040000000f00000400"}}) renameat2(r0, 0xffffffffffffffff, r1, &(0x7f0000000000)='./file0\x00', 0x4) r2 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x4040, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r2, 0xc0185879, &(0x7f0000000040)={@id={0x2, 0x0, @auto="001006040000000f00000400"}}) symlinkat(&(0x7f00000000c0)='./file0\x00', r2, &(0x7f0000000100)='./file0\x00') syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="10000000000001000100050000000000ffffff7f200000005a4d", 0x1a, 0x400}, {&(0x7f0000000440)="ff00feffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff00ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff03f0ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffe1ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed41034844d6de4005", 0x809, 0x800}, {0x0, 0x0, 0x1400}], 0x0, &(0x7f0000000500)=ANY=[], 0x0) (async) openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x4040, 0x0) (async) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r0, 0xc0185879, &(0x7f0000000040)={@id={0x2, 0x0, @auto="001006040000000f00000400"}}) (async) openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x4040, 0x0) (async) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r1, 0xc0185879, &(0x7f0000000040)={@id={0x2, 0x0, @auto="001006040000000f00000400"}}) (async) renameat2(r0, 0xffffffffffffffff, r1, &(0x7f0000000000)='./file0\x00', 0x4) (async) openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x4040, 0x0) (async) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r2, 0xc0185879, &(0x7f0000000040)={@id={0x2, 0x0, @auto="001006040000000f00000400"}}) (async) symlinkat(&(0x7f00000000c0)='./file0\x00', r2, &(0x7f0000000100)='./file0\x00') (async) [ 604.901679][ T27] audit: type=1800 audit(1664078802.333:337): pid=11515 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=".pending_reads" dev="sda1" ino=1182 res=0 errno=0 04:06:42 executing program 2: syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="7f6c1529c3bacb5ce399c7241af2d586a50d930284624a97284334ce2f88054ceacb16723caff92861f528c7f24db84b0d995d16de46e19c8fad9065470b199b26a20f974b5504f2e42ec2a9ea5eb815c66d712e48917b4e370a56e84baa"], 0x7) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="7f6c1529c3bacb5ce399c7241af2d586a50d930284624a97284334ce2f88054ceacb16723caff92861f528c7f24db84b0d995d16de46e19c8fad9065470b199b26a20f974b5504f2e42ec2a9ea5eb815c66d712e48917b4e370a56e84baa"], 0x7) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) (async) 04:06:42 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x4c4c, 0xfffffffffffffffd) [ 604.970890][ T27] audit: type=1800 audit(1664078802.363:338): pid=11515 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=".pending_reads" dev="sda1" ino=1182 res=0 errno=0 04:06:42 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time_recursive\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001400)={&(0x7f00000013c0)='ext4_es_find_extent_range_enter\x00'}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r1, 0xff, 0x0, 0x0, 0x0) (async, rerun: 32) syncfs(r1) (async, rerun: 32) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r2, &(0x7f0000000000), 0x20b000) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000200)='illinois\x00', 0x9) (async) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10) (async) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000000)=0x2805, 0x4) (async) r4 = openat(0xffffffffffffffff, &(0x7f00000002c0)='/proc/self/exe\x00', 0x0, 0x5) (async) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000280)={0x0, &(0x7f00000001c0)}, 0x10) close(0xffffffffffffffff) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e20, @loopback}, 0x10) (async) sendfile(r3, r4, 0x0, 0x90000) (async) recvmsg(r3, &(0x7f0000000580)={0x0, 0x41, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4084, 0xfffffe1f}], 0x6, 0x0, 0xfffffffffffffcc9}, 0x700) (async) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, 0x0) 04:06:42 executing program 2: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_host_features={{0x3d, 0xe}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, "000000000000ea00"}}}, 0x11) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) [ 605.023466][T11531] loop3: detected capacity change from 0 to 20 [ 605.042339][ T27] audit: type=1800 audit(1664078802.363:339): pid=11515 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=".pending_reads" dev="sda1" ino=1182 res=0 errno=0 04:06:42 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x4c4d, 0xfffffffffffffffd) 04:06:42 executing program 3: r0 = syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="10000000000001000100050000000000ffffff7f200000005a4d", 0x1a, 0x400}, {&(0x7f0000000440)="ff00feffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff00ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff03f0ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffe1ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed41034844d6de4005", 0x809, 0x800}, {0x0, 0x0, 0x1400}], 0x0, &(0x7f0000000500)=ANY=[], 0x0) symlinkat(&(0x7f0000002940)='./file0\x00', r0, &(0x7f0000001900)='./file1\x00') ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f00000000c0)) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x4040, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r1, 0xc0185879, &(0x7f0000000040)={@id={0x2, 0x0, @auto="001006040000000f00000400"}}) openat(r1, &(0x7f0000000000)='./file0\x00', 0xe00, 0x88) [ 605.117441][ T27] audit: type=1800 audit(1664078802.513:340): pid=11531 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=".pending_reads" dev="sda1" ino=1183 res=0 errno=0 [ 605.162787][ T3694] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 605.189243][T11552] loop3: detected capacity change from 0 to 20 [ 605.195306][ T27] audit: type=1800 audit(1664078802.513:341): pid=11531 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=".pending_reads" dev="sda1" ino=1183 res=0 errno=0 [ 605.268240][ T41] kworker/u4:2: attempt to access beyond end of device [ 605.268240][ T41] loop3: rw=1, sector=44, nr_sectors = 2 limit=20 [ 605.313385][ T41] Buffer I/O error on dev loop3, logical block 22, lost async page write [ 605.322087][ T41] kworker/u4:2: attempt to access beyond end of device [ 605.322087][ T41] loop3: rw=1, sector=46, nr_sectors = 2 limit=20 [ 605.339821][ T3779] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 605.354055][ T41] Buffer I/O error on dev loop3, logical block 23, lost async page write [ 605.443106][ T3694] usb 2-1: Using ep0 maxpacket: 16 [ 605.573730][ T3694] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 605.642895][ T3779] usb 5-1: Using ep0 maxpacket: 16 [ 605.742954][ T3694] usb 2-1: New USB device found, idVendor=15c2, idProduct=0040, bcdDevice=80.f3 [ 605.752056][ T3694] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 605.765753][ T3694] usb 2-1: Product: syz [ 605.769943][ T3694] usb 2-1: Manufacturer: syz [ 605.774866][ T3779] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 605.785093][ T3694] usb 2-1: SerialNumber: syz [ 605.790201][ T3779] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 605.804268][ T3694] usb 2-1: config 0 descriptor?? [ 605.855300][ T3694] input: iMON Panel, Knob and Mouse(15c2:0040) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input195 [ 605.993251][ T3779] usb 5-1: New USB device found, idVendor=15c2, idProduct=0040, bcdDevice=80.f3 [ 606.002595][ T3779] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 606.010766][ T3779] usb 5-1: Product: syz [ 606.015409][ T3779] usb 5-1: Manufacturer: syz [ 606.020044][ T3779] usb 5-1: SerialNumber: syz [ 606.027517][ T3779] usb 5-1: config 0 descriptor?? [ 606.081717][ T3779] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 606.089450][ T3779] imon 5-1:0.0: unable to initialize intf0, err -19 [ 606.096258][ T3779] imon:imon_probe: failed to initialize context! [ 606.102664][ T3779] imon 5-1:0.0: unable to register, err -19 [ 606.162874][ T3694] rc_core: IR keymap rc-imon-pad not found [ 606.168779][ T3694] Registered IR keymap rc-empty [ 606.177879][ T3694] imon 2-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 606.188580][ T3694] imon 2-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 606.314693][ T3694] rc rc0: iMON Remote (15c2:0040) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 606.325654][ T3694] input: iMON Remote (15c2:0040) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input196 [ 606.339202][ T3694] imon 2-1:0.0: iMON device (15c2:0040, intf0) on usb<2:67> initialized [ 606.485819][ T3779] usb 2-1: USB disconnect, device number 67 04:06:44 executing program 1: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000007c0)=ANY=[@ANYBLOB="1201000079201010c2154000f3800102030109021b0001000000000904000001e104550009058b0b40"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x2000000000000000) [ 607.292887][ T3694] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 607.562701][ T3694] usb 2-1: Using ep0 maxpacket: 16 [ 607.702866][ T3694] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 04:06:45 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x4c4e, 0xfffffffffffffffd) 04:06:45 executing program 2: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_host_features={{0x3d, 0xe}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, "000000000000ea00"}}}, 0x11) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_host_features={{0x3d, 0xe}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, "000000000000ea00"}}}, 0x11) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) (async) 04:06:45 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time_recursive\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001400)={&(0x7f00000013c0)='ext4_es_find_extent_range_enter\x00'}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r1, 0xff, 0x0, 0x0, 0x0) syncfs(r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r2, &(0x7f0000000000), 0x20b000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000200)='illinois\x00', 0x9) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000000)=0x2805, 0x4) r4 = openat(0xffffffffffffffff, &(0x7f00000002c0)='/proc/self/exe\x00', 0x0, 0x5) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000280)={0x0, &(0x7f00000001c0)}, 0x10) close(0xffffffffffffffff) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e20, @loopback}, 0x10) sendfile(r3, r4, 0x0, 0x90000) recvmsg(r3, &(0x7f0000000580)={0x0, 0x41, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4084, 0xfffffe1f}], 0x6, 0x0, 0xfffffffffffffcc9}, 0x700) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, 0x0) 04:06:45 executing program 3: r0 = syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="10000000000001000100050000000000ffffff7f200000005a4d", 0x1a, 0x400}, {&(0x7f0000000440)="ff00feffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff00ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff03f0ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffe1ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed41034844d6de4005", 0x809, 0x800}, {0x0, 0x0, 0x1400}], 0x0, &(0x7f0000000500)=ANY=[], 0x0) symlinkat(&(0x7f0000002940)='./file0\x00', r0, &(0x7f0000001900)='./file1\x00') ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f00000000c0)) (async) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x4040, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r1, 0xc0185879, &(0x7f0000000040)={@id={0x2, 0x0, @auto="001006040000000f00000400"}}) (async) openat(r1, &(0x7f0000000000)='./file0\x00', 0xe00, 0x88) 04:06:45 executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000007c0)=ANY=[@ANYBLOB="1201000079201010c2154000f3800102030109021b0001000000000904000001e1045500"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) [ 607.892262][ T23] usb 5-1: USB disconnect, device number 52 [ 607.893440][ T3694] usb 2-1: New USB device found, idVendor=15c2, idProduct=0040, bcdDevice=80.f3 [ 607.930592][T11568] loop3: detected capacity change from 0 to 20 04:06:45 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x4c4f, 0xfffffffffffffffd) 04:06:45 executing program 2: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_host_features={{0x3d, 0xe}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, "000000000000ea00"}}}, 0x11) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_host_features={{0x3d, 0xe}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, "000000000000ea00"}}}, 0x11) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) (async) [ 607.936742][ T3694] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 04:06:45 executing program 3: r0 = syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="10000000000001000100050000000000ffffff7f200000005a4d", 0x1a, 0x400}, {&(0x7f0000000440)="ff00feffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff00ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff03f0ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffe1ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed41034844d6de4005", 0x809, 0x800}, {0x0, 0x0, 0x1400}], 0x0, &(0x7f0000000500)=ANY=[], 0x0) symlinkat(&(0x7f0000002940)='./file0\x00', r0, &(0x7f0000001900)='./file1\x00') ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f00000000c0)) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x4040, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r1, 0xc0185879, &(0x7f0000000040)={@id={0x2, 0x0, @auto="001006040000000f00000400"}}) openat(r1, &(0x7f0000000000)='./file0\x00', 0xe00, 0x88) syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="10000000000001000100050000000000ffffff7f200000005a4d", 0x1a, 0x400}, {&(0x7f0000000440)="ff00feffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff00ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff03f0ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffe1ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed41034844d6de4005", 0x809, 0x800}, {0x0, 0x0, 0x1400}], 0x0, &(0x7f0000000500)=ANY=[], 0x0) (async) symlinkat(&(0x7f0000002940)='./file0\x00', r0, &(0x7f0000001900)='./file1\x00') (async) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f00000000c0)) (async) openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x4040, 0x0) (async) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r1, 0xc0185879, &(0x7f0000000040)={@id={0x2, 0x0, @auto="001006040000000f00000400"}}) (async) openat(r1, &(0x7f0000000000)='./file0\x00', 0xe00, 0x88) (async) 04:06:45 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time_recursive\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001400)={&(0x7f00000013c0)='ext4_es_find_extent_range_enter\x00'}, 0x10) (async) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r1, 0xff, 0x0, 0x0, 0x0) (async) syncfs(r1) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r2, &(0x7f0000000000), 0x20b000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000200)='illinois\x00', 0x9) (async) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000000)=0x2805, 0x4) r4 = openat(0xffffffffffffffff, &(0x7f00000002c0)='/proc/self/exe\x00', 0x0, 0x5) (async) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000280)={0x0, &(0x7f00000001c0)}, 0x10) close(0xffffffffffffffff) (async) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e20, @loopback}, 0x10) sendfile(r3, r4, 0x0, 0x90000) recvmsg(r3, &(0x7f0000000580)={0x0, 0x41, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4084, 0xfffffe1f}], 0x6, 0x0, 0xfffffffffffffcc9}, 0x700) (async) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, 0x0) [ 607.981329][ T27] kauditd_printk_skb: 2 callbacks suppressed [ 607.981345][ T27] audit: type=1800 audit(1664078805.413:344): pid=11572 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=".pending_reads" dev="sda1" ino=1162 res=0 errno=0 [ 608.018132][ T3694] usb 2-1: Product: syz 04:06:45 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="042e0b01c8000700ff7f02000000"], 0xe) 04:06:45 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x4c50, 0xfffffffffffffffd) [ 608.032130][ T3694] usb 2-1: Manufacturer: syz [ 608.044243][ T3694] usb 2-1: SerialNumber: syz [ 608.059428][ T41] kworker/u4:2: attempt to access beyond end of device [ 608.059428][ T41] loop3: rw=1, sector=44, nr_sectors = 2 limit=20 [ 608.082877][ T3694] usb 2-1: config 0 descriptor?? [ 608.095817][ T41] Buffer I/O error on dev loop3, logical block 22, lost async page write [ 608.123698][ T41] kworker/u4:2: attempt to access beyond end of device [ 608.123698][ T41] loop3: rw=1, sector=46, nr_sectors = 2 limit=20 [ 608.155238][ T3694] input: iMON Panel, Knob and Mouse(15c2:0040) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input197 [ 608.158567][ T41] Buffer I/O error on dev loop3, logical block 23, lost async page write [ 608.216905][T11588] loop3: detected capacity change from 0 to 20 [ 608.246903][ T27] audit: type=1800 audit(1664078805.683:345): pid=11588 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=".pending_reads" dev="sda1" ino=1170 res=0 errno=0 [ 608.301719][ T57] kworker/u4:4: attempt to access beyond end of device [ 608.301719][ T57] loop3: rw=1, sector=44, nr_sectors = 2 limit=20 [ 608.317576][ T57] Buffer I/O error on dev loop3, logical block 22, lost async page write [ 608.328372][ T57] kworker/u4:4: attempt to access beyond end of device [ 608.328372][ T57] loop3: rw=1, sector=46, nr_sectors = 2 limit=20 [ 608.342268][ T57] Buffer I/O error on dev loop3, logical block 23, lost async page write [ 608.392786][ T23] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 608.449575][ T3694] rc_core: IR keymap rc-imon-pad not found [ 608.455619][ T3694] Registered IR keymap rc-empty [ 608.460744][ T3694] imon 2-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 608.471252][ T3694] imon 2-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 608.603237][ T3694] rc rc0: iMON Remote (15c2:0040) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 608.620102][ T3694] input: iMON Remote (15c2:0040) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input198 [ 608.632719][ T23] usb 5-1: Using ep0 maxpacket: 16 [ 608.635044][ T3694] imon 2-1:0.0: iMON device (15c2:0040, intf0) on usb<2:68> initialized [ 608.753046][ T23] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 608.763695][ T23] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 608.789044][ T3694] usb 2-1: USB disconnect, device number 68 [ 608.933200][ T23] usb 5-1: New USB device found, idVendor=15c2, idProduct=0040, bcdDevice=80.f3 [ 608.946456][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 608.954627][ T23] usb 5-1: Product: syz [ 608.958824][ T23] usb 5-1: Manufacturer: syz [ 608.967454][ T23] usb 5-1: SerialNumber: syz [ 608.974350][ T23] usb 5-1: config 0 descriptor?? [ 609.014438][ T23] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 609.022392][ T23] imon 5-1:0.0: unable to initialize intf0, err -19 [ 609.035232][ T23] imon:imon_probe: failed to initialize context! [ 609.041941][ T23] imon 5-1:0.0: unable to register, err -19 04:06:46 executing program 1: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000007c0)=ANY=[@ANYBLOB="1201000079201010c2154000f3800102030109021b0001000000000904000001e104550009058b0b40"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x4800000000000000) 04:06:46 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time_recursive\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001400)={&(0x7f00000013c0)='ext4_es_find_extent_range_enter\x00'}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r1, 0xff, 0x0, 0x0, 0x0) syncfs(r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r2, &(0x7f0000000000), 0x20b000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000200)='illinois\x00', 0x9) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000000)=0x2805, 0x4) r4 = openat(0xffffffffffffffff, &(0x7f00000002c0)='/proc/self/exe\x00', 0x0, 0x5) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000280)={0x0, &(0x7f00000001c0)}, 0x10) close(0xffffffffffffffff) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e20, @loopback}, 0x10) sendfile(r3, r4, 0x0, 0x90000) recvmsg(r3, &(0x7f0000000580)={0x0, 0x41, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4084, 0xfffffe1f}], 0x6, 0x0, 0xfffffffffffffcc9}, 0x700) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time_recursive\x00', 0x26e1, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001400)={&(0x7f00000013c0)='ext4_es_find_extent_range_enter\x00'}, 0x10) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) getsockopt(r1, 0xff, 0x0, 0x0, 0x0) (async) syncfs(r1) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async) write$cgroup_type(r2, &(0x7f0000000000), 0x20b000) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000200)='illinois\x00', 0x9) (async) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10) (async) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000000)=0x2805, 0x4) (async) openat(0xffffffffffffffff, &(0x7f00000002c0)='/proc/self/exe\x00', 0x0, 0x5) (async) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000280)={0x0, &(0x7f00000001c0)}, 0x10) (async) close(0xffffffffffffffff) (async) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e20, @loopback}, 0x10) (async) sendfile(r3, r4, 0x0, 0x90000) (async) recvmsg(r3, &(0x7f0000000580)={0x0, 0x41, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4084, 0xfffffe1f}], 0x6, 0x0, 0xfffffffffffffcc9}, 0x700) (async) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, 0x0) (async) 04:06:46 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x4c51, 0xfffffffffffffffd) 04:06:46 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="042e0b01c8000700ff7f02000000"], 0xe) 04:06:46 executing program 3: r0 = syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="10000000000001000100050000000000ffffff7f200000005a4d", 0x1a, 0x400}, {&(0x7f0000000440)="ff00feffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff00ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff03f0ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffe1ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed41034844d6de4005", 0x809, 0x800}, {0x0, 0x0, 0x1400}], 0x0, &(0x7f0000000500)=ANY=[], 0x0) symlinkat(&(0x7f0000002940)='./file0\x00', r0, &(0x7f0000001900)='./file1\x00') r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x3, 0x8c4, 0x2c, 0x800, 0x1, 0xfff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x3, 0x1}, 0x48) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r1, 0x8008f512, &(0x7f0000000000)) [ 609.315402][T11600] loop3: detected capacity change from 0 to 20 [ 609.390434][ T2432] kworker/u4:5: attempt to access beyond end of device [ 609.390434][ T2432] loop3: rw=1, sector=44, nr_sectors = 2 limit=20 [ 609.429999][ T2432] Buffer I/O error on dev loop3, logical block 22, lost async page write [ 609.443410][ T2432] kworker/u4:5: attempt to access beyond end of device [ 609.443410][ T2432] loop3: rw=1, sector=46, nr_sectors = 2 limit=20 [ 609.459259][ T2432] Buffer I/O error on dev loop3, logical block 23, lost async page write [ 609.642735][ T3694] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 609.913099][ T3694] usb 2-1: Using ep0 maxpacket: 16 [ 610.043582][ T3694] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 610.232905][ T3694] usb 2-1: New USB device found, idVendor=15c2, idProduct=0040, bcdDevice=80.f3 [ 610.242013][ T3694] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 610.250117][ T3694] usb 2-1: Product: syz [ 610.254744][ T3694] usb 2-1: Manufacturer: syz [ 610.259346][ T3694] usb 2-1: SerialNumber: syz [ 610.267989][ T3694] usb 2-1: config 0 descriptor?? [ 610.324986][ T3694] input: iMON Panel, Knob and Mouse(15c2:0040) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input199 [ 610.602955][ T3694] rc_core: IR keymap rc-imon-pad not found [ 610.608931][ T3694] Registered IR keymap rc-empty [ 610.614214][ T3694] imon 2-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 610.625322][ T3694] imon 2-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 610.783741][ T3694] rc rc0: iMON Remote (15c2:0040) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 610.795786][ T3694] input: iMON Remote (15c2:0040) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input200 [ 610.808343][ T3694] imon 2-1:0.0: iMON device (15c2:0040, intf0) on usb<2:69> initialized 04:06:48 executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000007c0)=ANY=[@ANYBLOB="1201000079201010c2154000f3800102030109021b0001000000000904000001e104550009058b"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 04:06:48 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="042e0b01c8000700ff7f02000000"], 0xe) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="042e0b01c8000700ff7f02000000"], 0xe) (async) 04:06:48 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x4c52, 0xfffffffffffffffd) 04:06:48 executing program 3: r0 = syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="10000000000001000100050000000000ffffff7f200000005a4d", 0x1a, 0x400}, {&(0x7f0000000440)="ff00feffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff00ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff03f0ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffe1ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed41034844d6de4005", 0x809, 0x800}, {0x0, 0x0, 0x1400}], 0x0, &(0x7f0000000500)=ANY=[], 0x0) symlinkat(&(0x7f0000002940)='./file0\x00', r0, &(0x7f0000001900)='./file1\x00') (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x3, 0x8c4, 0x2c, 0x800, 0x1, 0xfff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x3, 0x1}, 0x48) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r1, 0x8008f512, &(0x7f0000000000)) 04:06:48 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time_recursive\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001400)={&(0x7f00000013c0)='ext4_es_find_extent_range_enter\x00'}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r1, 0xff, 0x0, 0x0, 0x0) syncfs(r1) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffff88) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000200)='illinois\x00', 0x9) bind$inet(r2, &(0x7f0000000300)={0x2, 0x4e20, @broadcast}, 0xfffffffffffffc94) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000000)=0x2805, 0x4) r3 = openat(0xffffffffffffffff, &(0x7f00000002c0)='/proc/self/exe\x00', 0xa0800, 0x5) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000280)={0x5, &(0x7f00000000c0)=[{0x4, 0x2, 0x4}, {0x2d7d, 0x4, 0x6, 0x4}, {0x5, 0x7, 0x3, 0x7}, {0x8, 0x20, 0x2, 0x80}, {0x42e2, 0xff, 0xaa, 0x2}]}, 0x10) close(0xffffffffffffffff) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e20, @loopback}, 0x10) sendfile(r2, r3, 0x0, 0x90002) recvmsg(r2, &(0x7f0000000580)={0x0, 0x41, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4084, 0xfffffe1f}], 0x6, 0x0, 0xfffffffffffffcc9}, 0x700) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, 0x0) [ 610.960262][ T3694] usb 2-1: USB disconnect, device number 69 [ 610.966297][ C0] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 610.983441][ T15] usb 5-1: USB disconnect, device number 53 04:06:48 executing program 2: syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x0, 0xc9, 0xfa}}}, 0x8) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) 04:06:48 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x4c53, 0xfffffffffffffffd) [ 611.021649][T11613] loop3: detected capacity change from 0 to 20 [ 611.133794][ T2432] kworker/u4:5: attempt to access beyond end of device [ 611.133794][ T2432] loop3: rw=1, sector=44, nr_sectors = 2 limit=20 [ 611.157990][ T2432] Buffer I/O error on dev loop3, logical block 22, lost async page write [ 611.171784][ T2432] kworker/u4:5: attempt to access beyond end of device [ 611.171784][ T2432] loop3: rw=1, sector=46, nr_sectors = 2 limit=20 [ 611.201759][ T2432] Buffer I/O error on dev loop3, logical block 23, lost async page write 04:06:48 executing program 1: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000007c0)=ANY=[@ANYBLOB="1201000079201010c2154000f3800102030109021b0001000000000904000001e104550009058b0b40"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x4c00000000000000) 04:06:48 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time_recursive\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001400)={&(0x7f00000013c0)='ext4_es_find_extent_range_enter\x00'}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r1, 0xff, 0x0, 0x0, 0x0) (async) syncfs(r1) (async) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffff88) (async, rerun: 64) r2 = socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 64) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000200)='illinois\x00', 0x9) bind$inet(r2, &(0x7f0000000300)={0x2, 0x4e20, @broadcast}, 0xfffffffffffffc94) (async) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000000)=0x2805, 0x4) (async) r3 = openat(0xffffffffffffffff, &(0x7f00000002c0)='/proc/self/exe\x00', 0xa0800, 0x5) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000280)={0x5, &(0x7f00000000c0)=[{0x4, 0x2, 0x4}, {0x2d7d, 0x4, 0x6, 0x4}, {0x5, 0x7, 0x3, 0x7}, {0x8, 0x20, 0x2, 0x80}, {0x42e2, 0xff, 0xaa, 0x2}]}, 0x10) (async) close(0xffffffffffffffff) (async) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e20, @loopback}, 0x10) (async) sendfile(r2, r3, 0x0, 0x90002) (async) recvmsg(r2, &(0x7f0000000580)={0x0, 0x41, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4084, 0xfffffe1f}], 0x6, 0x0, 0xfffffffffffffcc9}, 0x700) (async) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, 0x0) 04:06:48 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x4c54, 0xfffffffffffffffd) 04:06:48 executing program 3: r0 = syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="10000000000001000100050000000000ffffff7f200000005a4d", 0x1a, 0x400}, {&(0x7f0000000440)="ff00feffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff00ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff03f0ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffe1ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed41034844d6de4005", 0x809, 0x800}, {0x0, 0x0, 0x1400}], 0x0, &(0x7f0000000500)=ANY=[], 0x0) symlinkat(&(0x7f0000002940)='./file0\x00', r0, &(0x7f0000001900)='./file1\x00') (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x3, 0x8c4, 0x2c, 0x800, 0x1, 0xfff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x3, 0x1}, 0x48) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r1, 0x8008f512, &(0x7f0000000000)) 04:06:48 executing program 2: syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x0, 0xc9, 0xfa}}}, 0x8) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x0, 0xc9, 0xfa}}}, 0x8) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) (async) [ 611.494848][T11626] loop3: detected capacity change from 0 to 20 [ 611.512989][ T15] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 611.569001][ T57] kworker/u4:4: attempt to access beyond end of device [ 611.569001][ T57] loop3: rw=1, sector=44, nr_sectors = 2 limit=20 [ 611.593851][ T57] Buffer I/O error on dev loop3, logical block 22, lost async page write [ 611.610484][ T57] kworker/u4:4: attempt to access beyond end of device [ 611.610484][ T57] loop3: rw=1, sector=46, nr_sectors = 2 limit=20 [ 611.624629][ T57] Buffer I/O error on dev loop3, logical block 23, lost async page write [ 611.792869][ T15] usb 5-1: Using ep0 maxpacket: 16 [ 611.832852][ T3694] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 611.952867][ T15] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 612.113013][ T3694] usb 2-1: Using ep0 maxpacket: 16 [ 612.156043][ T15] usb 5-1: New USB device found, idVendor=15c2, idProduct=0040, bcdDevice=80.f3 [ 612.165481][ T15] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 612.173556][ T15] usb 5-1: Product: syz [ 612.177724][ T15] usb 5-1: Manufacturer: syz [ 612.182304][ T15] usb 5-1: SerialNumber: syz [ 612.190549][ T15] usb 5-1: config 0 descriptor?? [ 612.237699][ T15] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 612.245569][ T15] imon 5-1:0.0: unable to initialize intf0, err -19 [ 612.252186][ T15] imon:imon_probe: failed to initialize context! [ 612.258933][ T3694] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 612.270138][ T15] imon 5-1:0.0: unable to register, err -19 [ 612.487794][ T3694] usb 2-1: New USB device found, idVendor=15c2, idProduct=0040, bcdDevice=80.f3 [ 612.497084][ T3694] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 612.505214][ T3694] usb 2-1: Product: syz [ 612.509425][ T3694] usb 2-1: Manufacturer: syz [ 612.514341][ T3694] usb 2-1: SerialNumber: syz [ 612.523921][ T3694] usb 2-1: config 0 descriptor?? [ 612.564946][ T3694] input: iMON Panel, Knob and Mouse(15c2:0040) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input201 [ 612.865778][ T3694] rc_core: IR keymap rc-imon-pad not found [ 612.871681][ T3694] Registered IR keymap rc-empty [ 612.877829][ T3694] imon 2-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 612.888331][ T3694] imon 2-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 613.023655][ T3694] rc rc0: iMON Remote (15c2:0040) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 613.035714][ T3694] input: iMON Remote (15c2:0040) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input202 [ 613.049824][ T3694] imon 2-1:0.0: iMON device (15c2:0040, intf0) on usb<2:70> initialized [ 613.201035][ T3691] usb 2-1: USB disconnect, device number 70 04:06:51 executing program 2: syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x0, 0xc9, 0xfa}}}, 0x8) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x0, 0xc9, 0xfa}}}, 0x8) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) (async) 04:06:51 executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000007c0)=ANY=[@ANYBLOB="1201000079201010c2154000f3800102030109021b0001000000000904000001e104550009058b"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 04:06:51 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x4c55, 0xfffffffffffffffd) 04:06:51 executing program 3: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)="55b354e5f7f702f5824df2ee1037a5761363468daa7f1ffc111035a9167e77b339c3c9272430231d259c95d47683242d5c4d8ba0061f993e794a6d424199e40c", 0x40}, 0x68) r0 = syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="10000000000001000100050000000000ffffff7f200000005a4d", 0x1a, 0x400}, {&(0x7f0000000440)="ff00feffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff00ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff03f0ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffe1ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed41034844d6de4005", 0x809, 0x800}, {0x0, 0x0, 0x1400}], 0x0, &(0x7f0000000500)=ANY=[], 0x0) symlinkat(&(0x7f0000002940)='./file0\x00', r0, &(0x7f0000001900)='./file1\x00') r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x4040, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r1, 0xc0185879, &(0x7f0000000040)={@id={0x2, 0x0, @auto="001006040000000f00000400"}}) renameat2(r1, &(0x7f0000000100)='./file1\x00', r0, &(0x7f0000000180)='./file1\x00', 0x4) 04:06:51 executing program 1: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000007c0)=ANY=[@ANYBLOB="1201000079201010c2154000f3800102030109021b0001000000000904000001e104550009058b0b40"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x6000000000000000) [ 614.091315][ T23] usb 5-1: USB disconnect, device number 54 04:06:51 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time_recursive\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001400)={&(0x7f00000013c0)='ext4_es_find_extent_range_enter\x00'}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r1, 0xff, 0x0, 0x0, 0x0) (async) syncfs(r1) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffff88) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000200)='illinois\x00', 0x9) bind$inet(r2, &(0x7f0000000300)={0x2, 0x4e20, @broadcast}, 0xfffffffffffffc94) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000000)=0x2805, 0x4) r3 = openat(0xffffffffffffffff, &(0x7f00000002c0)='/proc/self/exe\x00', 0xa0800, 0x5) (async) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000280)={0x5, &(0x7f00000000c0)=[{0x4, 0x2, 0x4}, {0x2d7d, 0x4, 0x6, 0x4}, {0x5, 0x7, 0x3, 0x7}, {0x8, 0x20, 0x2, 0x80}, {0x42e2, 0xff, 0xaa, 0x2}]}, 0x10) (async) close(0xffffffffffffffff) (async) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e20, @loopback}, 0x10) sendfile(r2, r3, 0x0, 0x90002) (async) recvmsg(r2, &(0x7f0000000580)={0x0, 0x41, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4084, 0xfffffe1f}], 0x6, 0x0, 0xfffffffffffffcc9}, 0x700) (async) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, 0x0) 04:06:51 executing program 2: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x4040, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r0, 0xc0185879, &(0x7f0000000040)={@id={0x2, 0x0, @auto="001006040000000f00000400"}}) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x4040, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r1, 0xc0185879, &(0x7f0000000040)={@id={0x2, 0x0, @auto="001006040000000f00000400"}}) r2 = signalfd4(r0, &(0x7f00000000c0)={[0x9]}, 0x8, 0x80800) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) 04:06:51 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x4c56, 0xfffffffffffffffd) [ 614.203543][T11648] loop3: detected capacity change from 0 to 20 [ 614.251080][ T27] audit: type=1800 audit(1664078811.683:346): pid=11659 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name=".pending_reads" dev="sda1" ino=1179 res=0 errno=0 04:06:51 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time_recursive\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x4, &(0x7f00000000c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x2e, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001400)={&(0x7f00000013c0)='ext4_es_find_extent_range_enter\x00'}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r1, 0xff, 0x0, 0x0, 0x0) syncfs(r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r2, &(0x7f0000000000), 0x20b000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000200)='illinois\x00', 0x9) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000000)=0x2805, 0x4) r4 = openat(0xffffffffffffffff, &(0x7f00000002c0)='/proc/self/exe\x00', 0x0, 0x5) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000280)={0x0, &(0x7f00000001c0)}, 0x10) close(0xffffffffffffffff) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e20, @loopback}, 0x10) sendfile(r3, r4, 0x0, 0x90000) recvmsg(r3, &(0x7f0000000580)={0x0, 0x41, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4084, 0xfffffe1f}], 0x6, 0x0, 0xfffffffffffffcc9}, 0x700) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, 0x0) 04:06:51 executing program 2: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x4040, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r0, 0xc0185879, &(0x7f0000000040)={@id={0x2, 0x0, @auto="001006040000000f00000400"}}) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x4040, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r1, 0xc0185879, &(0x7f0000000040)={@id={0x2, 0x0, @auto="001006040000000f00000400"}}) r2 = signalfd4(r0, &(0x7f00000000c0)={[0x9]}, 0x8, 0x80800) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) [ 614.314814][ T27] audit: type=1800 audit(1664078811.733:347): pid=11648 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=".pending_reads" dev="sda1" ino=1181 res=0 errno=0 [ 614.352051][ T2432] kworker/u4:5: attempt to access beyond end of device [ 614.352051][ T2432] loop3: rw=1, sector=44, nr_sectors = 2 limit=20 04:06:51 executing program 3: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)="55b354e5f7f702f5824df2ee1037a5761363468daa7f1ffc111035a9167e77b339c3c9272430231d259c95d47683242d5c4d8ba0061f993e794a6d424199e40c", 0x40}, 0x68) (async) r0 = syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="10000000000001000100050000000000ffffff7f200000005a4d", 0x1a, 0x400}, {&(0x7f0000000440)="ff00feffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff00ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff03f0ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffe1ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed41034844d6de4005", 0x809, 0x800}, {0x0, 0x0, 0x1400}], 0x0, &(0x7f0000000500)=ANY=[], 0x0) symlinkat(&(0x7f0000002940)='./file0\x00', r0, &(0x7f0000001900)='./file1\x00') (async) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x4040, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r1, 0xc0185879, &(0x7f0000000040)={@id={0x2, 0x0, @auto="001006040000000f00000400"}}) renameat2(r1, &(0x7f0000000100)='./file1\x00', r0, &(0x7f0000000180)='./file1\x00', 0x4) 04:06:51 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x4c57, 0xfffffffffffffffd) 04:06:51 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time_recursive\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x4, &(0x7f00000000c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x2e, 0x10, 0x0}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001400)={&(0x7f00000013c0)='ext4_es_find_extent_range_enter\x00'}, 0x10) (async) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r1, 0xff, 0x0, 0x0, 0x0) (async) syncfs(r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r2, &(0x7f0000000000), 0x20b000) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000200)='illinois\x00', 0x9) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10) (async) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000000)=0x2805, 0x4) r4 = openat(0xffffffffffffffff, &(0x7f00000002c0)='/proc/self/exe\x00', 0x0, 0x5) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000280)={0x0, &(0x7f00000001c0)}, 0x10) close(0xffffffffffffffff) (async) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e20, @loopback}, 0x10) (async) sendfile(r3, r4, 0x0, 0x90000) (async) recvmsg(r3, &(0x7f0000000580)={0x0, 0x41, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4084, 0xfffffe1f}], 0x6, 0x0, 0xfffffffffffffcc9}, 0x700) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, 0x0) [ 614.438669][ T27] audit: type=1800 audit(1664078811.743:348): pid=11659 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name=".pending_reads" dev="sda1" ino=1179 res=0 errno=0 [ 614.472795][ T2432] Buffer I/O error on dev loop3, logical block 22, lost async page write [ 614.481383][ T2432] kworker/u4:5: attempt to access beyond end of device [ 614.481383][ T2432] loop3: rw=1, sector=46, nr_sectors = 2 limit=20 [ 614.494831][ T15] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 614.562383][ T27] audit: type=1800 audit(1664078811.853:349): pid=11665 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name=".pending_reads" dev="sda1" ino=1161 res=0 errno=0 [ 614.567879][ T2432] Buffer I/O error on dev loop3, logical block 23, lost async page write [ 614.585110][ T23] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 614.630077][ T27] audit: type=1800 audit(1664078811.853:350): pid=11665 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name=".pending_reads" dev="sda1" ino=1161 res=0 errno=0 [ 614.698718][T11675] loop3: detected capacity change from 0 to 20 [ 614.744974][ T15] usb 2-1: Using ep0 maxpacket: 16 [ 614.763614][ T27] audit: type=1800 audit(1664078812.203:351): pid=11676 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=".pending_reads" dev="sda1" ino=1167 res=0 errno=0 [ 614.821183][ T41] kworker/u4:2: attempt to access beyond end of device [ 614.821183][ T41] loop3: rw=1, sector=44, nr_sectors = 2 limit=20 [ 614.858976][ T41] Buffer I/O error on dev loop3, logical block 22, lost async page write [ 614.868420][ T23] usb 5-1: Using ep0 maxpacket: 16 [ 614.884663][ T41] kworker/u4:2: attempt to access beyond end of device [ 614.884663][ T41] loop3: rw=1, sector=46, nr_sectors = 2 limit=20 [ 614.887873][ T15] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 614.915939][ T41] Buffer I/O error on dev loop3, logical block 23, lost async page write [ 614.993011][ T23] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 615.152806][ T15] usb 2-1: New USB device found, idVendor=15c2, idProduct=0040, bcdDevice=80.f3 [ 615.162049][ T15] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.162794][ T23] usb 5-1: New USB device found, idVendor=15c2, idProduct=0040, bcdDevice=80.f3 [ 615.174807][ T15] usb 2-1: Product: syz [ 615.179995][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.183500][ T15] usb 2-1: Manufacturer: syz [ 615.183520][ T15] usb 2-1: SerialNumber: syz [ 615.184929][ T15] usb 2-1: config 0 descriptor?? [ 615.196271][ T23] usb 5-1: Product: syz [ 615.196290][ T23] usb 5-1: Manufacturer: syz [ 615.196308][ T23] usb 5-1: SerialNumber: syz [ 615.209473][ T23] usb 5-1: config 0 descriptor?? [ 615.254782][ T15] input: iMON Panel, Knob and Mouse(15c2:0040) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input203 [ 615.264500][ T23] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 615.274335][ T23] imon 5-1:0.0: unable to initialize intf0, err -19 [ 615.280953][ T23] imon:imon_probe: failed to initialize context! [ 615.287360][ T23] imon 5-1:0.0: unable to register, err -19 [ 615.542762][ T15] rc_core: IR keymap rc-imon-pad not found [ 615.548769][ T15] Registered IR keymap rc-empty [ 615.554430][ T15] imon 2-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 615.564623][ T15] imon 2-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 615.693235][ T15] rc rc0: iMON Remote (15c2:0040) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 615.704607][ T15] input: iMON Remote (15c2:0040) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input204 [ 615.718566][ T15] imon 2-1:0.0: iMON device (15c2:0040, intf0) on usb<2:71> initialized [ 615.875974][ T23] usb 2-1: USB disconnect, device number 71 04:06:54 executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000007c0)=ANY=[@ANYBLOB="1201000079201010c2154000f3800102030109021b0001000000000904000001e104550009058b"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 04:06:54 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x4c58, 0xfffffffffffffffd) 04:06:54 executing program 2: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x4040, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r0, 0xc0185879, &(0x7f0000000040)={@id={0x2, 0x0, @auto="001006040000000f00000400"}}) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x4040, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r1, 0xc0185879, &(0x7f0000000040)={@id={0x2, 0x0, @auto="001006040000000f00000400"}}) (async, rerun: 64) r2 = signalfd4(r0, &(0x7f00000000c0)={[0x9]}, 0x8, 0x80800) (rerun: 64) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) 04:06:54 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time_recursive\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x4, &(0x7f00000000c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x2e, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001400)={&(0x7f00000013c0)='ext4_es_find_extent_range_enter\x00'}, 0x10) (async) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r1, 0xff, 0x0, 0x0, 0x0) syncfs(r1) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r2, &(0x7f0000000000), 0x20b000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000200)='illinois\x00', 0x9) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10) (async) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000000)=0x2805, 0x4) r4 = openat(0xffffffffffffffff, &(0x7f00000002c0)='/proc/self/exe\x00', 0x0, 0x5) (async) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000280)={0x0, &(0x7f00000001c0)}, 0x10) (async) close(0xffffffffffffffff) (async) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e20, @loopback}, 0x10) sendfile(r3, r4, 0x0, 0x90000) recvmsg(r3, &(0x7f0000000580)={0x0, 0x41, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4084, 0xfffffe1f}], 0x6, 0x0, 0xfffffffffffffcc9}, 0x700) (async, rerun: 32) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, 0x0) (rerun: 32) 04:06:54 executing program 3: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)="55b354e5f7f702f5824df2ee1037a5761363468daa7f1ffc111035a9167e77b339c3c9272430231d259c95d47683242d5c4d8ba0061f993e794a6d424199e40c", 0x40}, 0x68) r0 = syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="10000000000001000100050000000000ffffff7f200000005a4d", 0x1a, 0x400}, {&(0x7f0000000440)="ff00feffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff00ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff03f0ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffe1ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed41034844d6de4005", 0x809, 0x800}, {0x0, 0x0, 0x1400}], 0x0, &(0x7f0000000500)=ANY=[], 0x0) symlinkat(&(0x7f0000002940)='./file0\x00', r0, &(0x7f0000001900)='./file1\x00') r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x4040, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r1, 0xc0185879, &(0x7f0000000040)={@id={0x2, 0x0, @auto="001006040000000f00000400"}}) renameat2(r1, &(0x7f0000000100)='./file1\x00', r0, &(0x7f0000000180)='./file1\x00', 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)="55b354e5f7f702f5824df2ee1037a5761363468daa7f1ffc111035a9167e77b339c3c9272430231d259c95d47683242d5c4d8ba0061f993e794a6d424199e40c", 0x40}, 0x68) (async) syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="10000000000001000100050000000000ffffff7f200000005a4d", 0x1a, 0x400}, {&(0x7f0000000440)="ff00feffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff00ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff03f0ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffe1ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed41034844d6de4005", 0x809, 0x800}, {0x0, 0x0, 0x1400}], 0x0, &(0x7f0000000500)=ANY=[], 0x0) (async) symlinkat(&(0x7f0000002940)='./file0\x00', r0, &(0x7f0000001900)='./file1\x00') (async) openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x4040, 0x0) (async) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r1, 0xc0185879, &(0x7f0000000040)={@id={0x2, 0x0, @auto="001006040000000f00000400"}}) (async) renameat2(r1, &(0x7f0000000100)='./file1\x00', r0, &(0x7f0000000180)='./file1\x00', 0x4) (async) 04:06:54 executing program 1: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000007c0)=ANY=[@ANYBLOB="1201000079201010c2154000f3800102030109021b0001000000000904000001e104550009058b0b40"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x6800000000000000) [ 617.145037][ T23] usb 5-1: USB disconnect, device number 55 04:06:54 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x4c59, 0xfffffffffffffffd) 04:06:54 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time_recursive\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001400)={&(0x7f00000013c0)='ext4_es_find_extent_range_enter\x00'}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r1, 0xff, 0x0, 0x0, 0x0) syncfs(r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r2, &(0x7f0000000000), 0x20b000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000200)='illinois\x00', 0x9) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000000)=0x2805, 0x4) r4 = openat(0xffffffffffffffff, &(0x7f00000002c0)='/proc/self/exe\x00', 0x0, 0x5) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000280)={0x0, &(0x7f00000001c0)}, 0x10) close(0xffffffffffffffff) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e20, @loopback}, 0x10) sendfile(r3, r4, 0x0, 0x90000) recvmsg(r3, &(0x7f0000000580)={0x0, 0x41, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4084, 0xfffffe1f}], 0x6, 0x0, 0xfffffffffffffcc9}, 0x700) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, 0x0) 04:06:54 executing program 2: syz_emit_vhci(&(0x7f0000001080)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_req={{0x34, 0x50}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0x9) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x4d}, "d3bb272b16623b056afcb8b4ef3df79be5f904cf6c7a9db64c2deb96d1ab9a95bc9cc8ab02dfb44dea1cf337bdf856f050b5dac49b87f841126225c1d990433c0a93e33a5f446b8acefa99ad37"}, 0x51) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02c85a2233d8695104978307497a200a00060005001afa020003001538598f133ca9ab2b0431c4133bd05dbd02a1a805ea"], 0xf) [ 617.180576][ T27] audit: type=1800 audit(1664078814.613:352): pid=11684 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name=".pending_reads" dev="sda1" ino=1172 res=0 errno=0 [ 617.208097][T11685] loop3: detected capacity change from 0 to 20 [ 617.258452][ T27] audit: type=1800 audit(1664078814.643:353): pid=11684 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name=".pending_reads" dev="sda1" ino=1172 res=0 errno=0 04:06:54 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x4c5a, 0xfffffffffffffffd) 04:06:54 executing program 3: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000), 0xc0, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f2, 0x20, 0x70bd28, 0x25dfdbff, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4c010}, 0xc040) r1 = syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x400000002, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="10000000000001080100050000000000ffffff7f200000005a4d", 0x1a, 0x400}, {&(0x7f0000000440)="ff00feffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff00ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffdfffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff3cffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffefffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff03f0ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffe1ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed41034844d6de4005", 0x809, 0x800}, {0x0, 0x0, 0x7ba}], 0x8000, &(0x7f0000000500)=ANY=[], 0x0) symlinkat(&(0x7f0000002940)='./file0\x00', r1, &(0x7f0000001900)='./file1\x00') [ 617.299712][ T27] audit: type=1800 audit(1664078814.693:354): pid=11685 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=".pending_reads" dev="sda1" ino=1156 res=0 errno=0 [ 617.321878][ T9] kworker/u4:0: attempt to access beyond end of device [ 617.321878][ T9] loop3: rw=1, sector=44, nr_sectors = 2 limit=20 04:06:54 executing program 2: syz_emit_vhci(&(0x7f0000001080)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_req={{0x34, 0x50}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0x9) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) (async) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x4d}, "d3bb272b16623b056afcb8b4ef3df79be5f904cf6c7a9db64c2deb96d1ab9a95bc9cc8ab02dfb44dea1cf337bdf856f050b5dac49b87f841126225c1d990433c0a93e33a5f446b8acefa99ad37"}, 0x51) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02c85a2233d8695104978307497a200a00060005001afa020003001538598f133ca9ab2b0431c4133bd05dbd02a1a805ea"], 0xf) [ 617.342486][ T9] Buffer I/O error on dev loop3, logical block 22, lost async page write [ 617.383257][ T9] kworker/u4:0: attempt to access beyond end of device [ 617.383257][ T9] loop3: rw=1, sector=46, nr_sectors = 2 limit=20 [ 617.404007][ T9] Buffer I/O error on dev loop3, logical block 23, lost async page write [ 617.441257][T11713] loop3: detected capacity change from 0 to 264192 [ 617.453991][ T142] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 617.672996][ T23] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 617.702793][ T142] usb 2-1: Using ep0 maxpacket: 16 [ 617.839033][ T142] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 617.887969][T11713] MINIX-fs: deleted inode referenced: 1 [ 617.952900][ T23] usb 5-1: Using ep0 maxpacket: 16 [ 618.033017][ T142] usb 2-1: New USB device found, idVendor=15c2, idProduct=0040, bcdDevice=80.f3 [ 618.042263][ T142] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 618.050425][ T142] usb 2-1: Product: syz [ 618.054884][ T142] usb 2-1: Manufacturer: syz [ 618.059516][ T142] usb 2-1: SerialNumber: syz [ 618.065616][ T142] usb 2-1: config 0 descriptor?? [ 618.106067][ T142] input: iMON Panel, Knob and Mouse(15c2:0040) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input205 [ 618.118019][ T23] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 618.323111][ T23] usb 5-1: New USB device found, idVendor=15c2, idProduct=0040, bcdDevice=80.f3 [ 618.332297][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 618.340430][ T23] usb 5-1: Product: syz [ 618.345457][ T23] usb 5-1: Manufacturer: syz [ 618.350436][ T23] usb 5-1: SerialNumber: syz [ 618.356920][ T23] usb 5-1: config 0 descriptor?? [ 618.405261][ T23] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 618.413092][ T142] rc_core: IR keymap rc-imon-pad not found [ 618.418913][ T142] Registered IR keymap rc-empty [ 618.423881][ T23] imon 5-1:0.0: unable to initialize intf0, err -19 [ 618.430781][ T23] imon:imon_probe: failed to initialize context! [ 618.437238][ T142] imon 2-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 618.447444][ T23] imon 5-1:0.0: unable to register, err -19 [ 618.455108][ T142] imon 2-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 618.563717][ T142] rc rc0: iMON Remote (15c2:0040) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 618.574706][ T142] input: iMON Remote (15c2:0040) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input206 [ 618.588651][ T142] imon 2-1:0.0: iMON device (15c2:0040, intf0) on usb<2:72> initialized [ 618.746301][ T3691] usb 2-1: USB disconnect, device number 72 04:06:57 executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000007c0)=ANY=[@ANYBLOB="1201000079201010c2154000f3800102030109021b0001000000000904000001e104550009058b0b"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 04:06:57 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x4c5b, 0xfffffffffffffffd) 04:06:57 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time_recursive\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001400)={&(0x7f00000013c0)='ext4_es_find_extent_range_enter\x00'}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r1, 0xff, 0x0, 0x0, 0x0) syncfs(r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r2, &(0x7f0000000000), 0x20b000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000200)='illinois\x00', 0x9) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000000)=0x2805, 0x4) r4 = openat(0xffffffffffffffff, &(0x7f00000002c0)='/proc/self/exe\x00', 0x0, 0x5) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000280)={0x0, &(0x7f00000001c0)}, 0x10) close(0xffffffffffffffff) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e20, @loopback}, 0x10) sendfile(r3, r4, 0x0, 0x90000) recvmsg(r3, &(0x7f0000000580)={0x0, 0x41, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4084, 0xfffffe1f}], 0x6, 0x0, 0xfffffffffffffcc9}, 0x700) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time_recursive\x00', 0x26e1, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001400)={&(0x7f00000013c0)='ext4_es_find_extent_range_enter\x00'}, 0x10) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) getsockopt(r1, 0xff, 0x0, 0x0, 0x0) (async) syncfs(r1) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async) write$cgroup_type(r2, &(0x7f0000000000), 0x20b000) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000200)='illinois\x00', 0x9) (async) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10) (async) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000000)=0x2805, 0x4) (async) openat(0xffffffffffffffff, &(0x7f00000002c0)='/proc/self/exe\x00', 0x0, 0x5) (async) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000280)={0x0, &(0x7f00000001c0)}, 0x10) (async) close(0xffffffffffffffff) (async) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e20, @loopback}, 0x10) (async) sendfile(r3, r4, 0x0, 0x90000) (async) recvmsg(r3, &(0x7f0000000580)={0x0, 0x41, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4084, 0xfffffe1f}], 0x6, 0x0, 0xfffffffffffffcc9}, 0x700) (async) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, 0x0) (async) 04:06:57 executing program 2: syz_emit_vhci(&(0x7f0000001080)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_req={{0x34, 0x50}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0x9) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) (async) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x4d}, "d3bb272b16623b056afcb8b4ef3df79be5f904cf6c7a9db64c2deb96d1ab9a95bc9cc8ab02dfb44dea1cf337bdf856f050b5dac49b87f841126225c1d990433c0a93e33a5f446b8acefa99ad37"}, 0x51) (async) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02c85a2233d8695104978307497a200a00060005001afa020003001538598f133ca9ab2b0431c4133bd05dbd02a1a805ea"], 0xf) 04:06:57 executing program 3: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000), 0xc0, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f2, 0x20, 0x70bd28, 0x25dfdbff, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4c010}, 0xc040) r1 = syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x400000002, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="10000000000001080100050000000000ffffff7f200000005a4d", 0x1a, 0x400}, {&(0x7f0000000440)="ff00feffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff00ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffdfffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff3cffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffefffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff03f0ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffe1ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed41034844d6de4005", 0x809, 0x800}, {0x0, 0x0, 0x7ba}], 0x8000, &(0x7f0000000500)=ANY=[], 0x0) symlinkat(&(0x7f0000002940)='./file0\x00', r1, &(0x7f0000001900)='./file1\x00') openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000), 0xc0, 0x0) (async) sendmsg$AUDIT_SIGNAL_INFO(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f2, 0x20, 0x70bd28, 0x25dfdbff, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4c010}, 0xc040) (async) syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x400000002, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="10000000000001080100050000000000ffffff7f200000005a4d", 0x1a, 0x400}, {&(0x7f0000000440)="ff00feffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff00ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffdfffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff3cffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffefffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff03f0ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffe1ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed41034844d6de4005", 0x809, 0x800}, {0x0, 0x0, 0x7ba}], 0x8000, &(0x7f0000000500)=ANY=[], 0x0) (async) symlinkat(&(0x7f0000002940)='./file0\x00', r1, &(0x7f0000001900)='./file1\x00') (async) 04:06:57 executing program 1: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000007c0)=ANY=[@ANYBLOB="1201000079201010c2154000f3800102030109021b0001000000000904000001e104550009058b0b40"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x6c00000000000000) [ 620.211978][ T15] usb 5-1: USB disconnect, device number 56 04:06:57 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x4c5c, 0xfffffffffffffffd) 04:06:57 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time_recursive\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001400)={&(0x7f00000013c0)='ext4_es_find_extent_range_enter\x00'}, 0x10) (async) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r1, 0xff, 0x0, 0x0, 0x0) syncfs(r1) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r2, &(0x7f0000000000), 0x20b000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000200)='illinois\x00', 0x9) (async) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000000)=0x2805, 0x4) (async) r4 = openat(0xffffffffffffffff, &(0x7f00000002c0)='/proc/self/exe\x00', 0x0, 0x5) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000280)={0x0, &(0x7f00000001c0)}, 0x10) close(0xffffffffffffffff) (async) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e20, @loopback}, 0x10) (async) sendfile(r3, r4, 0x0, 0x90000) (async) recvmsg(r3, &(0x7f0000000580)={0x0, 0x41, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4084, 0xfffffe1f}], 0x6, 0x0, 0xfffffffffffffcc9}, 0x700) (async) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, 0x0) 04:06:57 executing program 2: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8a080, 0x0) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x4040, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r1, 0xc0185879, &(0x7f0000000040)={@id={0x2, 0x0, @auto="001006040000000f00000400"}}) ioctl$SNDCTL_DSP_GETFMTS(r1, 0x8004500b, &(0x7f0000000100)=0x7ff) linkat(r0, &(0x7f0000000080)='./file0\x00', r1, &(0x7f00000000c0)='./file0\x00', 0x1400) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_USER_CONFIRM_NEG_REPLY}}, 0x7) [ 620.266515][T11726] loop3: detected capacity change from 0 to 264192 04:06:57 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x4c5d, 0xfffffffffffffffd) 04:06:57 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time_recursive\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001400)={&(0x7f00000013c0)='ext4_es_find_extent_range_enter\x00'}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r1, 0xff, 0x0, 0x0, 0x0) syncfs(r1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x9) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000200)='illinois\x00', 0x9) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e30, @empty}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000000)=0x2805, 0x4) r3 = openat(0xffffffffffffffff, &(0x7f00000002c0)='/proc/self/exe\x00', 0x0, 0x5) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000280)={0x0, &(0x7f00000001c0)}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e20, @broadcast}, 0x10) sendfile(r2, r3, 0x0, 0x90000) recvmsg(r2, &(0x7f0000000580)={0x0, 0x41, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4084, 0xfffffe1f}], 0x6, 0x0, 0xfffffffffffffcc9}, 0x700) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, 0x0) 04:06:57 executing program 2: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8a080, 0x0) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x4040, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r1, 0xc0185879, &(0x7f0000000040)={@id={0x2, 0x0, @auto="001006040000000f00000400"}}) ioctl$SNDCTL_DSP_GETFMTS(r1, 0x8004500b, &(0x7f0000000100)=0x7ff) linkat(r0, &(0x7f0000000080)='./file0\x00', r1, &(0x7f00000000c0)='./file0\x00', 0x1400) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_USER_CONFIRM_NEG_REPLY}}, 0x7) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8a080, 0x0) (async) openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x4040, 0x0) (async) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r1, 0xc0185879, &(0x7f0000000040)={@id={0x2, 0x0, @auto="001006040000000f00000400"}}) (async) ioctl$SNDCTL_DSP_GETFMTS(r1, 0x8004500b, &(0x7f0000000100)=0x7ff) (async) linkat(r0, &(0x7f0000000080)='./file0\x00', r1, &(0x7f00000000c0)='./file0\x00', 0x1400) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_USER_CONFIRM_NEG_REPLY}}, 0x7) (async) [ 620.412041][ T27] audit: type=1800 audit(1664078817.843:355): pid=11743 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name=".pending_reads" dev="sda1" ino=1163 res=0 errno=0 [ 620.490860][ T27] audit: type=1800 audit(1664078817.923:356): pid=11749 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name=".pending_reads" dev="sda1" ino=1164 res=0 errno=0 [ 620.523216][ T142] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 620.552917][ T3694] Bluetooth: hci6: command 0x0406 tx timeout [ 620.682717][ T15] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 620.782712][ T142] usb 2-1: Using ep0 maxpacket: 16 [ 620.902914][T11726] MINIX-fs: deleted inode referenced: 1 [ 620.923091][ T142] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 620.923477][ T15] usb 5-1: Using ep0 maxpacket: 16 [ 621.062795][ T15] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 621.073790][ T15] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 621.113607][ T142] usb 2-1: New USB device found, idVendor=15c2, idProduct=0040, bcdDevice=80.f3 [ 621.122980][ T142] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 621.130965][ T142] usb 2-1: Product: syz [ 621.135912][ T142] usb 2-1: Manufacturer: syz [ 621.140519][ T142] usb 2-1: SerialNumber: syz [ 621.148472][ T142] usb 2-1: config 0 descriptor?? [ 621.205129][ T142] input: iMON Panel, Knob and Mouse(15c2:0040) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input207 [ 621.242844][ T15] usb 5-1: New USB device found, idVendor=15c2, idProduct=0040, bcdDevice=80.f3 [ 621.251978][ T15] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 621.260140][ T15] usb 5-1: Product: syz [ 621.264423][ T15] usb 5-1: Manufacturer: syz [ 621.269103][ T15] usb 5-1: SerialNumber: syz [ 621.275655][ T15] usb 5-1: config 0 descriptor?? [ 621.313949][ T15] imon:imon_init_intf0: usb_submit_urb failed for intf0 (-90) [ 621.321686][ T15] imon 5-1:0.0: unable to initialize intf0, err -90 [ 621.332348][ T15] imon:imon_probe: failed to initialize context! [ 621.338755][ T15] imon 5-1:0.0: unable to register, err -19 [ 621.493010][ T142] rc_core: IR keymap rc-imon-pad not found [ 621.499003][ T142] Registered IR keymap rc-empty [ 621.504571][ T142] imon 2-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 621.518035][ T142] imon 2-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 621.645251][ T142] rc rc0: iMON Remote (15c2:0040) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 621.656118][ T142] input: iMON Remote (15c2:0040) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input208 [ 621.669366][ T142] imon 2-1:0.0: iMON device (15c2:0040, intf0) on usb<2:73> initialized [ 621.828998][ T3694] usb 2-1: USB disconnect, device number 73 04:07:00 executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000007c0)=ANY=[@ANYBLOB="1201000079201010c2154000f3800102030109021b0001000000000904000001e104550009058b0b"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 04:07:00 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time_recursive\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001400)={&(0x7f00000013c0)='ext4_es_find_extent_range_enter\x00'}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r1, 0xff, 0x0, 0x0, 0x0) (async) syncfs(r1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x9) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000200)='illinois\x00', 0x9) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e30, @empty}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000000)=0x2805, 0x4) (async) r3 = openat(0xffffffffffffffff, &(0x7f00000002c0)='/proc/self/exe\x00', 0x0, 0x5) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000280)={0x0, &(0x7f00000001c0)}, 0x10) (async) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e20, @broadcast}, 0x10) (async) sendfile(r2, r3, 0x0, 0x90000) recvmsg(r2, &(0x7f0000000580)={0x0, 0x41, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4084, 0xfffffe1f}], 0x6, 0x0, 0xfffffffffffffcc9}, 0x700) (async) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, 0x0) 04:07:00 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x4c5e, 0xfffffffffffffffd) 04:07:00 executing program 2: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8a080, 0x0) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x4040, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r1, 0xc0185879, &(0x7f0000000040)={@id={0x2, 0x0, @auto="001006040000000f00000400"}}) ioctl$SNDCTL_DSP_GETFMTS(r1, 0x8004500b, &(0x7f0000000100)=0x7ff) linkat(r0, &(0x7f0000000080)='./file0\x00', r1, &(0x7f00000000c0)='./file0\x00', 0x1400) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_USER_CONFIRM_NEG_REPLY}}, 0x7) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8a080, 0x0) (async) openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x4040, 0x0) (async) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r1, 0xc0185879, &(0x7f0000000040)={@id={0x2, 0x0, @auto="001006040000000f00000400"}}) (async) ioctl$SNDCTL_DSP_GETFMTS(r1, 0x8004500b, &(0x7f0000000100)=0x7ff) (async) linkat(r0, &(0x7f0000000080)='./file0\x00', r1, &(0x7f00000000c0)='./file0\x00', 0x1400) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_USER_CONFIRM_NEG_REPLY}}, 0x7) (async) 04:07:00 executing program 3: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000), 0xc0, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f2, 0x20, 0x70bd28, 0x25dfdbff, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4c010}, 0xc040) (async) r1 = syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x400000002, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="10000000000001080100050000000000ffffff7f200000005a4d", 0x1a, 0x400}, {&(0x7f0000000440)="ff00feffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff00ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffdfffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff3cffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffefffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff03f0ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffe1ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed41034844d6de4005", 0x809, 0x800}, {0x0, 0x0, 0x7ba}], 0x8000, &(0x7f0000000500)=ANY=[], 0x0) symlinkat(&(0x7f0000002940)='./file0\x00', r1, &(0x7f0000001900)='./file1\x00') 04:07:00 executing program 1: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000007c0)=ANY=[@ANYBLOB="1201000079201010c2154000f3800102030109021b0001000000000904000001e104550009058b0b40"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x7400000000000000) [ 623.285901][ T142] usb 5-1: USB disconnect, device number 57 [ 623.316795][ T27] audit: type=1800 audit(1664078820.753:357): pid=11764 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name=".pending_reads" dev="sda1" ino=1170 res=0 errno=0 [ 623.327194][T11766] loop3: detected capacity change from 0 to 264192 04:07:00 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x4c5f, 0xfffffffffffffffd) 04:07:00 executing program 2: syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x2, 0x5f}, @l2cap_cid_signaling={{0x5b}, [@l2cap_create_chan_rsp={{0xd, 0xcc, 0x8}, {0x5, 0x0, 0x5, 0xd9e4}}, @l2cap_conf_rsp={{0x5, 0x9, 0x36}, {0x7f, 0x200, 0xce1, [@l2cap_conf_ews={0x7, 0x2, 0x1}, @l2cap_conf_efs={0x6, 0x10, {0x9, 0x0, 0x21, 0x6e4, 0x0, 0xfffffff7}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x0, 0x7, 0x400, 0xd33, 0x1}}, @l2cap_conf_rfc={0x4, 0x9, {0x1, 0x7f, 0x20, 0x0, 0x1, 0x6705}}, @l2cap_conf_ews={0x7, 0x2, 0x2}]}}, @l2cap_conn_rsp={{0x3, 0x79, 0x8}, {0x5ee, 0x5, 0xb459, 0x7}}, @l2cap_create_chan_req={{0xc, 0x1, 0x6}, {0x1c5f, 0x1, 0x7f}}]}}, 0x64) [ 623.373557][ T27] audit: type=1800 audit(1664078820.783:358): pid=11770 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name=".pending_reads" dev="sda1" ino=1170 res=0 errno=0 04:07:00 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time_recursive\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001400)={&(0x7f00000013c0)='ext4_es_find_extent_range_enter\x00'}, 0x10) (async) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r1, 0xff, 0x0, 0x0, 0x0) (async) syncfs(r1) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x9) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000200)='illinois\x00', 0x9) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e30, @empty}, 0x10) (async) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000000)=0x2805, 0x4) r3 = openat(0xffffffffffffffff, &(0x7f00000002c0)='/proc/self/exe\x00', 0x0, 0x5) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000280)={0x0, &(0x7f00000001c0)}, 0x10) (async) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e20, @broadcast}, 0x10) (async) sendfile(r2, r3, 0x0, 0x90000) (async) recvmsg(r2, &(0x7f0000000580)={0x0, 0x41, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4084, 0xfffffe1f}], 0x6, 0x0, 0xfffffffffffffcc9}, 0x700) (async) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, 0x0) 04:07:00 executing program 2: syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x2, 0x5f}, @l2cap_cid_signaling={{0x5b}, [@l2cap_create_chan_rsp={{0xd, 0xcc, 0x8}, {0x5, 0x0, 0x5, 0xd9e4}}, @l2cap_conf_rsp={{0x5, 0x9, 0x36}, {0x7f, 0x200, 0xce1, [@l2cap_conf_ews={0x7, 0x2, 0x1}, @l2cap_conf_efs={0x6, 0x10, {0x9, 0x0, 0x21, 0x6e4, 0x0, 0xfffffff7}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x0, 0x7, 0x400, 0xd33, 0x1}}, @l2cap_conf_rfc={0x4, 0x9, {0x1, 0x7f, 0x20, 0x0, 0x1, 0x6705}}, @l2cap_conf_ews={0x7, 0x2, 0x2}]}}, @l2cap_conn_rsp={{0x3, 0x79, 0x8}, {0x5ee, 0x5, 0xb459, 0x7}}, @l2cap_create_chan_req={{0xc, 0x1, 0x6}, {0x1c5f, 0x1, 0x7f}}]}}, 0x64) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x2, 0x5f}, @l2cap_cid_signaling={{0x5b}, [@l2cap_create_chan_rsp={{0xd, 0xcc, 0x8}, {0x5, 0x0, 0x5, 0xd9e4}}, @l2cap_conf_rsp={{0x5, 0x9, 0x36}, {0x7f, 0x200, 0xce1, [@l2cap_conf_ews={0x7, 0x2, 0x1}, @l2cap_conf_efs={0x6, 0x10, {0x9, 0x0, 0x21, 0x6e4, 0x0, 0xfffffff7}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x0, 0x7, 0x400, 0xd33, 0x1}}, @l2cap_conf_rfc={0x4, 0x9, {0x1, 0x7f, 0x20, 0x0, 0x1, 0x6705}}, @l2cap_conf_ews={0x7, 0x2, 0x2}]}}, @l2cap_conn_rsp={{0x3, 0x79, 0x8}, {0x5ee, 0x5, 0xb459, 0x7}}, @l2cap_create_chan_req={{0xc, 0x1, 0x6}, {0x1c5f, 0x1, 0x7f}}]}}, 0x64) (async) 04:07:00 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x4c60, 0xfffffffffffffffd) 04:07:00 executing program 2: syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x2, 0x5f}, @l2cap_cid_signaling={{0x5b}, [@l2cap_create_chan_rsp={{0xd, 0xcc, 0x8}, {0x5, 0x0, 0x5, 0xd9e4}}, @l2cap_conf_rsp={{0x5, 0x9, 0x36}, {0x7f, 0x200, 0xce1, [@l2cap_conf_ews={0x7, 0x2, 0x1}, @l2cap_conf_efs={0x6, 0x10, {0x9, 0x0, 0x21, 0x6e4, 0x0, 0xfffffff7}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x0, 0x7, 0x400, 0xd33, 0x1}}, @l2cap_conf_rfc={0x4, 0x9, {0x1, 0x7f, 0x20, 0x0, 0x1, 0x6705}}, @l2cap_conf_ews={0x7, 0x2, 0x2}]}}, @l2cap_conn_rsp={{0x3, 0x79, 0x8}, {0x5ee, 0x5, 0xb459, 0x7}}, @l2cap_create_chan_req={{0xc, 0x1, 0x6}, {0x1c5f, 0x1, 0x7f}}]}}, 0x64) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x2, 0x5f}, @l2cap_cid_signaling={{0x5b}, [@l2cap_create_chan_rsp={{0xd, 0xcc, 0x8}, {0x5, 0x0, 0x5, 0xd9e4}}, @l2cap_conf_rsp={{0x5, 0x9, 0x36}, {0x7f, 0x200, 0xce1, [@l2cap_conf_ews={0x7, 0x2, 0x1}, @l2cap_conf_efs={0x6, 0x10, {0x9, 0x0, 0x21, 0x6e4, 0x0, 0xfffffff7}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x0, 0x7, 0x400, 0xd33, 0x1}}, @l2cap_conf_rfc={0x4, 0x9, {0x1, 0x7f, 0x20, 0x0, 0x1, 0x6705}}, @l2cap_conf_ews={0x7, 0x2, 0x2}]}}, @l2cap_conn_rsp={{0x3, 0x79, 0x8}, {0x5ee, 0x5, 0xb459, 0x7}}, @l2cap_create_chan_req={{0xc, 0x1, 0x6}, {0x1c5f, 0x1, 0x7f}}]}}, 0x64) (async) 04:07:01 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x4c61, 0xfffffffffffffffd) [ 623.594028][ T1233] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.600795][ T1233] ieee802154 phy1 wpan1: encryption failed: -22 [ 623.612892][ T3692] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 623.782720][ T142] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 623.862742][ T3692] usb 2-1: Using ep0 maxpacket: 16 [ 623.982769][ T3692] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 624.052897][ T142] usb 5-1: Using ep0 maxpacket: 16 [ 624.085555][T11766] MINIX-fs: deleted inode referenced: 1 [ 624.152920][ T3692] usb 2-1: New USB device found, idVendor=15c2, idProduct=0040, bcdDevice=80.f3 [ 624.162026][ T3692] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 624.176136][ T3692] usb 2-1: Product: syz [ 624.192010][ T3692] usb 2-1: Manufacturer: syz [ 624.196976][ T3692] usb 2-1: SerialNumber: syz [ 624.203660][ T142] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 624.210174][ T3692] usb 2-1: config 0 descriptor?? [ 624.215235][ T142] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 624.254942][ T3692] input: iMON Panel, Knob and Mouse(15c2:0040) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input209 [ 624.402957][ T142] usb 5-1: New USB device found, idVendor=15c2, idProduct=0040, bcdDevice=80.f3 [ 624.412265][ T142] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 624.424717][ T142] usb 5-1: Product: syz [ 624.428882][ T142] usb 5-1: Manufacturer: syz [ 624.435892][ T142] usb 5-1: SerialNumber: syz [ 624.442273][ T142] usb 5-1: config 0 descriptor?? [ 624.485876][ T142] imon:imon_init_intf0: usb_submit_urb failed for intf0 (-90) [ 624.493561][ T142] imon 5-1:0.0: unable to initialize intf0, err -90 [ 624.500353][ T142] imon:imon_probe: failed to initialize context! [ 624.506843][ T142] imon 5-1:0.0: unable to register, err -19 [ 624.552939][ T3692] rc_core: IR keymap rc-imon-pad not found [ 624.558850][ T3692] Registered IR keymap rc-empty [ 624.564070][ T3692] imon 2-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 624.574219][ T3692] imon 2-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 624.713734][ T3692] rc rc0: iMON Remote (15c2:0040) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 624.730776][ T3692] input: iMON Remote (15c2:0040) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input210 [ 624.747499][ T3692] imon 2-1:0.0: iMON device (15c2:0040, intf0) on usb<2:74> initialized [ 624.896417][ T3692] usb 2-1: USB disconnect, device number 74 04:07:03 executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000007c0)=ANY=[@ANYBLOB="1201000079201010c2154000f3800102030109021b0001000000000904000001e104550009058b0b"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 04:07:03 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time_recursive\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001400)={&(0x7f00000013c0)='ext4_es_find_extent_range_enter\x00'}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r1, 0xff, 0x0, 0x0, 0x0) syncfs(r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r2, &(0x7f0000000000), 0x20b000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000200)='illinois\x00', 0x9) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000000)=0x2805, 0x4) openat(0xffffffffffffffff, &(0x7f00000002c0)='/proc/self/exe\x00', 0x0, 0x5) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000280)={0x0, &(0x7f00000001c0)}, 0x10) close(0xffffffffffffffff) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e20, @loopback}, 0x10) sendfile(0xffffffffffffffff, r0, 0x0, 0x201) recvmsg(r3, &(0x7f0000000580)={0x0, 0x41, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4084, 0xfffffe1f}], 0x6, 0x0, 0xfffffffffffffcc9}, 0x700) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, 0x0) 04:07:03 executing program 2: syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="02c9105b00570001000400a100030010400400ff0f2b000f0404000700300004ff34000700400007027f010702d8080409027f080900ffff04000202ff000102050006107f000101050000000900002008000000050100"/96], 0x60) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x13}, "b6eb1729cdd7878e8d1f682c2bead28bb74044"}, 0x17) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) 04:07:03 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x4c62, 0xfffffffffffffffd) 04:07:03 executing program 3: r0 = syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="10000000000001000100050000000000ffffff7f200000005a4d", 0x1a, 0x400}, {&(0x7f0000000440)="ff00feffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff00ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff03f0ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffe1ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed41034844d6de4005", 0x809, 0x800}, {0x0, 0x0, 0x1400}], 0x0, &(0x7f0000000500)=ANY=[], 0x0) symlinkat(&(0x7f0000002940)='./file0\x00', r0, &(0x7f0000001900)='./file1\x00') ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x1f, 0x8}}, './file0\x00'}) r2 = socket$inet(0x2, 0x80000, 0x7) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2, {0xffffffff}}, './file1\x00'}) mknodat(r1, &(0x7f0000000100)='./file1\x00', 0x80, 0x48d) r3 = socket$inet6_dccp(0xa, 0x6, 0x0) r4 = signalfd4(r3, &(0x7f0000000000)={[0x1]}, 0x8, 0x0) open_tree(r4, &(0x7f0000000080)='./file1\x00', 0x900) lseek(0xffffffffffffffff, 0x9, 0x3) 04:07:03 executing program 1: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000007c0)=ANY=[@ANYBLOB="1201000079201010c2154000f3800102030109021b0001000000000904000001e104550009058b0b40"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x770f000000000000) 04:07:03 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x4c63, 0xfffffffffffffffd) 04:07:03 executing program 2: syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="02c9105b00570001000400a100030010400400ff0f2b000f0404000700300004ff34000700400007027f010702d8080409027f080900ffff04000202ff000102050006107f000101050000000900002008000000050100"/96], 0x60) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x13}, "b6eb1729cdd7878e8d1f682c2bead28bb74044"}, 0x17) (async) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) (async) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) [ 626.346558][ T23] usb 5-1: USB disconnect, device number 58 [ 626.378536][T11799] loop3: detected capacity change from 0 to 20 04:07:03 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x4c64, 0xfffffffffffffffd) 04:07:03 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x4c65, 0xfffffffffffffffd) 04:07:03 executing program 2: syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="02c9105b00570001000400a100030010400400ff0f2b000f0404000700300004ff34000700400007027f010702d8080409027f080900ffff04000202ff000102050006107f000101050000000900002008000000050100"/96], 0x60) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x13}, "b6eb1729cdd7878e8d1f682c2bead28bb74044"}, 0x17) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) (async) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) 04:07:03 executing program 3: r0 = syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="10000000000001000100050000000000ffffff7f200000005a4d", 0x1a, 0x400}, {&(0x7f0000000440)="ff00feffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff00ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff03f0ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffe1ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed41034844d6de4005", 0x809, 0x800}, {0x0, 0x0, 0x1400}], 0x0, &(0x7f0000000500)=ANY=[], 0x0) symlinkat(&(0x7f0000002940)='./file0\x00', r0, &(0x7f0000001900)='./file1\x00') ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x1f, 0x8}}, './file0\x00'}) r2 = socket$inet(0x2, 0x80000, 0x7) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2, {0xffffffff}}, './file1\x00'}) mknodat(r1, &(0x7f0000000100)='./file1\x00', 0x80, 0x48d) r3 = socket$inet6_dccp(0xa, 0x6, 0x0) r4 = signalfd4(r3, &(0x7f0000000000)={[0x1]}, 0x8, 0x0) open_tree(r4, &(0x7f0000000080)='./file1\x00', 0x900) lseek(0xffffffffffffffff, 0x9, 0x3) syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="10000000000001000100050000000000ffffff7f200000005a4d", 0x1a, 0x400}, {&(0x7f0000000440)="ff00feffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff00ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff03f0ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffe1ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed41034844d6de4005", 0x809, 0x800}, {0x0, 0x0, 0x1400}], 0x0, &(0x7f0000000500)=ANY=[], 0x0) (async) symlinkat(&(0x7f0000002940)='./file0\x00', r0, &(0x7f0000001900)='./file1\x00') (async) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x1f, 0x8}}, './file0\x00'}) (async) socket$inet(0x2, 0x80000, 0x7) (async) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2, {0xffffffff}}, './file1\x00'}) (async) mknodat(r1, &(0x7f0000000100)='./file1\x00', 0x80, 0x48d) (async) socket$inet6_dccp(0xa, 0x6, 0x0) (async) signalfd4(r3, &(0x7f0000000000)={[0x1]}, 0x8, 0x0) (async) open_tree(r4, &(0x7f0000000080)='./file1\x00', 0x900) (async) lseek(0xffffffffffffffff, 0x9, 0x3) (async) [ 626.556090][ T9] kworker/u4:0: attempt to access beyond end of device [ 626.556090][ T9] loop3: rw=1, sector=44, nr_sectors = 2 limit=20 [ 626.582818][ T9] Buffer I/O error on dev loop3, logical block 22, lost async page write [ 626.591404][ T9] kworker/u4:0: attempt to access beyond end of device [ 626.591404][ T9] loop3: rw=1, sector=46, nr_sectors = 2 limit=20 [ 626.615046][ T9] Buffer I/O error on dev loop3, logical block 23, lost async page write [ 626.653541][T11825] loop3: detected capacity change from 0 to 20 [ 626.673094][ T3691] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 626.771771][ T57] kworker/u4:4: attempt to access beyond end of device [ 626.771771][ T57] loop3: rw=1, sector=44, nr_sectors = 2 limit=20 [ 626.793486][ T57] Buffer I/O error on dev loop3, logical block 22, lost async page write [ 626.802316][ T57] kworker/u4:4: attempt to access beyond end of device [ 626.802316][ T57] loop3: rw=1, sector=46, nr_sectors = 2 limit=20 [ 626.816171][ T23] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 626.822305][ T57] Buffer I/O error on dev loop3, logical block 23, lost async page write [ 626.962716][ T3691] usb 2-1: Using ep0 maxpacket: 16 [ 627.092819][ T23] usb 5-1: Using ep0 maxpacket: 16 [ 627.098202][ T3691] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 627.252889][ T23] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 627.264161][ T23] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 627.302986][ T3691] usb 2-1: New USB device found, idVendor=15c2, idProduct=0040, bcdDevice=80.f3 [ 627.312149][ T3691] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 627.324705][ T3691] usb 2-1: Product: syz [ 627.328864][ T3691] usb 2-1: Manufacturer: syz [ 627.335033][ T3691] usb 2-1: SerialNumber: syz [ 627.342059][ T3691] usb 2-1: config 0 descriptor?? [ 627.395278][ T3691] input: iMON Panel, Knob and Mouse(15c2:0040) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input211 [ 627.472891][ T23] usb 5-1: New USB device found, idVendor=15c2, idProduct=0040, bcdDevice=80.f3 [ 627.482181][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 627.490495][ T23] usb 5-1: Product: syz [ 627.494836][ T23] usb 5-1: Manufacturer: syz [ 627.499476][ T23] usb 5-1: SerialNumber: syz [ 627.505765][ T23] usb 5-1: config 0 descriptor?? [ 627.544982][ T23] imon:imon_init_intf0: usb_submit_urb failed for intf0 (-90) [ 627.552483][ T23] imon 5-1:0.0: unable to initialize intf0, err -90 [ 627.559565][ T23] imon:imon_probe: failed to initialize context! [ 627.566189][ T23] imon 5-1:0.0: unable to register, err -19 [ 627.682929][ T3691] rc_core: IR keymap rc-imon-pad not found [ 627.688793][ T3691] Registered IR keymap rc-empty [ 627.693845][ T3691] imon 2-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 627.707816][ T3691] imon 2-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 627.844450][ T3691] rc rc0: iMON Remote (15c2:0040) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 627.855223][ T3691] input: iMON Remote (15c2:0040) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input212 [ 627.868138][ T3691] imon 2-1:0.0: iMON device (15c2:0040, intf0) on usb<2:75> initialized [ 628.027862][ T15] usb 2-1: USB disconnect, device number 75 04:07:06 executing program 2: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e04c3002d04"], 0x7) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_complete={{0x3, 0xb}, {0x20, 0xc8, @any, 0x0, 0x80}}}, 0xe) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x13e}, @l2cap_cid_signaling={{0x13a}, [@l2cap_conf_req={{0x4, 0xf1, 0x33}, {0x2, 0x20, [@l2cap_conf_flushto={0x2, 0x2, 0xcd}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_efs={0x6, 0x10, {0x20, 0x2, 0x401, 0x1ff, 0x7, 0xfffeffff}}, @l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_mtu={0x1, 0x2, 0x8}, @l2cap_conf_mtu={0x1, 0x2, 0x5}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x0, 0x0, 0x5, 0x3, 0x83}}]}}, @l2cap_move_chan_rsp={{0xf, 0x7, 0x4}, {0x7, 0x3}}, @l2cap_conn_rsp={{0x3, 0x20, 0x8}, {0x2, 0x2, 0x6, 0x7}}, @l2cap_conf_rsp={{0x5, 0x20, 0x27}, {0x1000, 0x6, 0x1, [@l2cap_conf_mtu={0x1, 0x2, 0x3}, @l2cap_conf_efs={0x6, 0x10, {0x0, 0x2, 0x1, 0x8000, 0x2, 0x6}}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x6e, 0x2, 0x2, 0x8, 0x6}}]}}, @l2cap_conf_rsp={{0x5, 0x1a, 0x4b}, {0x78c3, 0x7fff, 0x1, [@l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_efs={0x6, 0x10, {0x8, 0x1, 0x9, 0x0, 0x766, 0x8}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x0, 0x3f, 0x1ff, 0x4, 0x8001}}, @l2cap_conf_mtu={0x1, 0x2, 0x1f}, @l2cap_conf_efs={0x6, 0x10, {0x1f, 0x3, 0x0, 0x58b2, 0x6, 0x5}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x1, 0xfc, 0x800, 0x3f, 0x400}}]}}, @l2cap_conf_rsp={{0x5, 0xc7, 0x51}, {0x1f, 0x9, 0x2, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_efs={0x6, 0x10, {0x3, 0x2, 0x2, 0x2, 0x0, 0x9}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x4, 0x6, 0x5, 0x1, 0xfff}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x2, 0x1, 0xffff, 0x23, 0x2}}, @l2cap_conf_ews={0x7, 0x2, 0x1}, @l2cap_conf_mtu={0x1, 0x2, 0x8}, @l2cap_conf_efs={0x6, 0x10, {0x6, 0x2, 0x5, 0xd655, 0x1, 0x10001}}, @l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_fcs={0x5, 0x1, 0x1}]}}, @l2cap_move_chan_rsp={{0xf, 0xc0, 0x4}, {0x8, 0xec}}, @l2cap_create_chan_rsp={{0xd, 0x1, 0x8}, {0xea, 0x80, 0x2fa7, 0x1f}}, @l2cap_create_chan_rsp={{0xd, 0x0, 0x8}, {0xffff, 0xffff, 0xf26, 0xfa95}}]}}, 0x143) 04:07:06 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x4c66, 0xfffffffffffffffd) 04:07:06 executing program 3: r0 = syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="10000000000001000100050000000000ffffff7f200000005a4d", 0x1a, 0x400}, {&(0x7f0000000440)="ff00feffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff00ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff03f0ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffe1ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed41034844d6de4005", 0x809, 0x800}, {0x0, 0x0, 0x1400}], 0x0, &(0x7f0000000500)=ANY=[], 0x0) symlinkat(&(0x7f0000002940)='./file0\x00', r0, &(0x7f0000001900)='./file1\x00') ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x1f, 0x8}}, './file0\x00'}) r2 = socket$inet(0x2, 0x80000, 0x7) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2, {0xffffffff}}, './file1\x00'}) mknodat(r1, &(0x7f0000000100)='./file1\x00', 0x80, 0x48d) r3 = socket$inet6_dccp(0xa, 0x6, 0x0) r4 = signalfd4(r3, &(0x7f0000000000)={[0x1]}, 0x8, 0x0) open_tree(r4, &(0x7f0000000080)='./file1\x00', 0x900) lseek(0xffffffffffffffff, 0x9, 0x3) syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="10000000000001000100050000000000ffffff7f200000005a4d", 0x1a, 0x400}, {&(0x7f0000000440)="ff00feffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff00ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff03f0ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffe1ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed41034844d6de4005", 0x809, 0x800}, {0x0, 0x0, 0x1400}], 0x0, &(0x7f0000000500)=ANY=[], 0x0) (async) symlinkat(&(0x7f0000002940)='./file0\x00', r0, &(0x7f0000001900)='./file1\x00') (async) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x1f, 0x8}}, './file0\x00'}) (async) socket$inet(0x2, 0x80000, 0x7) (async) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2, {0xffffffff}}, './file1\x00'}) (async) mknodat(r1, &(0x7f0000000100)='./file1\x00', 0x80, 0x48d) (async) socket$inet6_dccp(0xa, 0x6, 0x0) (async) signalfd4(r3, &(0x7f0000000000)={[0x1]}, 0x8, 0x0) (async) open_tree(r4, &(0x7f0000000080)='./file1\x00', 0x900) (async) lseek(0xffffffffffffffff, 0x9, 0x3) (async) 04:07:06 executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000007c0)=ANY=[@ANYBLOB="1201000079201010c2154000f3800102030109021b0001000000000904000001e104550009058b0b40"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 04:07:06 executing program 1: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000007c0)=ANY=[@ANYBLOB="1201000079201010c2154000f3800102030109021b0001000000000904000001e104550009058b0b40"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x7a00000000000000) 04:07:06 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time_recursive\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001400)={&(0x7f00000013c0)='ext4_es_find_extent_range_enter\x00'}, 0x10) (async) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r1, 0xff, 0x0, 0x0, 0x0) syncfs(r1) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r2, &(0x7f0000000000), 0x20b000) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000200)='illinois\x00', 0x9) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10) (async) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000000)=0x2805, 0x4) openat(0xffffffffffffffff, &(0x7f00000002c0)='/proc/self/exe\x00', 0x0, 0x5) (async) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000280)={0x0, &(0x7f00000001c0)}, 0x10) close(0xffffffffffffffff) (async) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e20, @loopback}, 0x10) (async) sendfile(0xffffffffffffffff, r0, 0x0, 0x201) (async) recvmsg(r3, &(0x7f0000000580)={0x0, 0x41, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4084, 0xfffffe1f}], 0x6, 0x0, 0xfffffffffffffcc9}, 0x700) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, 0x0) 04:07:06 executing program 2: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e04c3002d04"], 0x7) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_complete={{0x3, 0xb}, {0x20, 0xc8, @any, 0x0, 0x80}}}, 0xe) (async) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x13e}, @l2cap_cid_signaling={{0x13a}, [@l2cap_conf_req={{0x4, 0xf1, 0x33}, {0x2, 0x20, [@l2cap_conf_flushto={0x2, 0x2, 0xcd}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_efs={0x6, 0x10, {0x20, 0x2, 0x401, 0x1ff, 0x7, 0xfffeffff}}, @l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_mtu={0x1, 0x2, 0x8}, @l2cap_conf_mtu={0x1, 0x2, 0x5}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x0, 0x0, 0x5, 0x3, 0x83}}]}}, @l2cap_move_chan_rsp={{0xf, 0x7, 0x4}, {0x7, 0x3}}, @l2cap_conn_rsp={{0x3, 0x20, 0x8}, {0x2, 0x2, 0x6, 0x7}}, @l2cap_conf_rsp={{0x5, 0x20, 0x27}, {0x1000, 0x6, 0x1, [@l2cap_conf_mtu={0x1, 0x2, 0x3}, @l2cap_conf_efs={0x6, 0x10, {0x0, 0x2, 0x1, 0x8000, 0x2, 0x6}}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x6e, 0x2, 0x2, 0x8, 0x6}}]}}, @l2cap_conf_rsp={{0x5, 0x1a, 0x4b}, {0x78c3, 0x7fff, 0x1, [@l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_efs={0x6, 0x10, {0x8, 0x1, 0x9, 0x0, 0x766, 0x8}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x0, 0x3f, 0x1ff, 0x4, 0x8001}}, @l2cap_conf_mtu={0x1, 0x2, 0x1f}, @l2cap_conf_efs={0x6, 0x10, {0x1f, 0x3, 0x0, 0x58b2, 0x6, 0x5}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x1, 0xfc, 0x800, 0x3f, 0x400}}]}}, @l2cap_conf_rsp={{0x5, 0xc7, 0x51}, {0x1f, 0x9, 0x2, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_efs={0x6, 0x10, {0x3, 0x2, 0x2, 0x2, 0x0, 0x9}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x4, 0x6, 0x5, 0x1, 0xfff}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x2, 0x1, 0xffff, 0x23, 0x2}}, @l2cap_conf_ews={0x7, 0x2, 0x1}, @l2cap_conf_mtu={0x1, 0x2, 0x8}, @l2cap_conf_efs={0x6, 0x10, {0x6, 0x2, 0x5, 0xd655, 0x1, 0x10001}}, @l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_fcs={0x5, 0x1, 0x1}]}}, @l2cap_move_chan_rsp={{0xf, 0xc0, 0x4}, {0x8, 0xec}}, @l2cap_create_chan_rsp={{0xd, 0x1, 0x8}, {0xea, 0x80, 0x2fa7, 0x1f}}, @l2cap_create_chan_rsp={{0xd, 0x0, 0x8}, {0xffff, 0xffff, 0xf26, 0xfa95}}]}}, 0x143) 04:07:06 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time_recursive\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001400)={&(0x7f00000013c0)='ext4_es_find_extent_range_enter\x00'}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r1, 0xff, 0x0, 0x0, 0x0) syncfs(r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r2, &(0x7f0000000000), 0x20b000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000200)='illinois\x00', 0x9) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000000)=0x2805, 0x4) openat(0xffffffffffffffff, &(0x7f00000002c0)='/proc/self/exe\x00', 0x0, 0x5) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000280)={0x0, &(0x7f00000001c0)}, 0x10) close(0xffffffffffffffff) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e20, @loopback}, 0x10) sendfile(0xffffffffffffffff, r0, 0x0, 0x201) recvmsg(r3, &(0x7f0000000580)={0x0, 0x41, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4084, 0xfffffe1f}], 0x6, 0x0, 0xfffffffffffffcc9}, 0x700) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time_recursive\x00', 0x26e1, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001400)={&(0x7f00000013c0)='ext4_es_find_extent_range_enter\x00'}, 0x10) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) getsockopt(r1, 0xff, 0x0, 0x0, 0x0) (async) syncfs(r1) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async) write$cgroup_type(r2, &(0x7f0000000000), 0x20b000) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000200)='illinois\x00', 0x9) (async) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10) (async) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000000)=0x2805, 0x4) (async) openat(0xffffffffffffffff, &(0x7f00000002c0)='/proc/self/exe\x00', 0x0, 0x5) (async) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000280)={0x0, &(0x7f00000001c0)}, 0x10) (async) close(0xffffffffffffffff) (async) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e20, @loopback}, 0x10) (async) sendfile(0xffffffffffffffff, r0, 0x0, 0x201) (async) recvmsg(r3, &(0x7f0000000580)={0x0, 0x41, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4084, 0xfffffe1f}], 0x6, 0x0, 0xfffffffffffffcc9}, 0x700) (async) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, 0x0) (async) [ 629.401799][ T142] usb 5-1: USB disconnect, device number 59 [ 629.426061][T11845] loop3: detected capacity change from 0 to 20 04:07:06 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x4c67, 0xfffffffffffffffd) 04:07:06 executing program 2: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e04c3002d04"], 0x7) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_complete={{0x3, 0xb}, {0x20, 0xc8, @any, 0x0, 0x80}}}, 0xe) (async) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x13e}, @l2cap_cid_signaling={{0x13a}, [@l2cap_conf_req={{0x4, 0xf1, 0x33}, {0x2, 0x20, [@l2cap_conf_flushto={0x2, 0x2, 0xcd}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_efs={0x6, 0x10, {0x20, 0x2, 0x401, 0x1ff, 0x7, 0xfffeffff}}, @l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_mtu={0x1, 0x2, 0x8}, @l2cap_conf_mtu={0x1, 0x2, 0x5}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x0, 0x0, 0x5, 0x3, 0x83}}]}}, @l2cap_move_chan_rsp={{0xf, 0x7, 0x4}, {0x7, 0x3}}, @l2cap_conn_rsp={{0x3, 0x20, 0x8}, {0x2, 0x2, 0x6, 0x7}}, @l2cap_conf_rsp={{0x5, 0x20, 0x27}, {0x1000, 0x6, 0x1, [@l2cap_conf_mtu={0x1, 0x2, 0x3}, @l2cap_conf_efs={0x6, 0x10, {0x0, 0x2, 0x1, 0x8000, 0x2, 0x6}}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x6e, 0x2, 0x2, 0x8, 0x6}}]}}, @l2cap_conf_rsp={{0x5, 0x1a, 0x4b}, {0x78c3, 0x7fff, 0x1, [@l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_efs={0x6, 0x10, {0x8, 0x1, 0x9, 0x0, 0x766, 0x8}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x0, 0x3f, 0x1ff, 0x4, 0x8001}}, @l2cap_conf_mtu={0x1, 0x2, 0x1f}, @l2cap_conf_efs={0x6, 0x10, {0x1f, 0x3, 0x0, 0x58b2, 0x6, 0x5}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x1, 0xfc, 0x800, 0x3f, 0x400}}]}}, @l2cap_conf_rsp={{0x5, 0xc7, 0x51}, {0x1f, 0x9, 0x2, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_efs={0x6, 0x10, {0x3, 0x2, 0x2, 0x2, 0x0, 0x9}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x4, 0x6, 0x5, 0x1, 0xfff}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x2, 0x1, 0xffff, 0x23, 0x2}}, @l2cap_conf_ews={0x7, 0x2, 0x1}, @l2cap_conf_mtu={0x1, 0x2, 0x8}, @l2cap_conf_efs={0x6, 0x10, {0x6, 0x2, 0x5, 0xd655, 0x1, 0x10001}}, @l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_fcs={0x5, 0x1, 0x1}]}}, @l2cap_move_chan_rsp={{0xf, 0xc0, 0x4}, {0x8, 0xec}}, @l2cap_create_chan_rsp={{0xd, 0x1, 0x8}, {0xea, 0x80, 0x2fa7, 0x1f}}, @l2cap_create_chan_rsp={{0xd, 0x0, 0x8}, {0xffff, 0xffff, 0xf26, 0xfa95}}]}}, 0x143) 04:07:07 executing program 3: r0 = syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="10000000000001000100050000000000ffffff7f200000005a4d", 0x1a, 0x400}, {&(0x7f0000000440)="ff00feffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff00ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff03f0ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffe1ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed41034844d6de4005", 0x809, 0x800}, {0x0, 0x0, 0x1400}], 0x0, &(0x7f0000000500)=ANY=[], 0x0) symlinkat(&(0x7f0000002940)='./file0\x00', r0, &(0x7f0000001900)='./file1\x00') 04:07:07 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x4c68, 0xfffffffffffffffd) 04:07:07 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time_recursive\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001400)={&(0x7f00000013c0)='ext4_es_find_extent_range_enter\x00'}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r1, 0xff, 0x0, 0x0, 0x0) syncfs(r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r2, &(0x7f0000000000), 0x20b000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000200)='illinois\x00', 0x9) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000000)=0x2805, 0x4) r4 = openat(0xffffffffffffffff, &(0x7f00000002c0)='/proc/self/exe\x00', 0x0, 0x5) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f00000000c0)={0x4, &(0x7f0000000280)=[{0x87, 0x9}, {0x8, 0x60, 0x5, 0x6}, {0x3, 0xe1, 0x4, 0xfffff800}, {0x2, 0x8, 0xf0, 0xfffffff7}]}, 0x10) close(0xffffffffffffffff) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e20, @loopback}, 0x10) sendfile(r3, r4, 0x0, 0x90000) recvmsg(r3, &(0x7f0000000580)={0x0, 0x41, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4084, 0xfffffe1f}], 0x6, 0x0, 0xfffffffffffffcc9}, 0x700) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, 0x0) 04:07:07 executing program 2: syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x40}, @l2cap_cid_signaling={{0x3c}, [@l2cap_move_chan_req={{0xe, 0x0, 0x3}, {0xfffe, 0x8}}, @l2cap_conf_rsp={{0x5, 0x40, 0xd}, {0x101, 0x400, 0xb2fe, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x6}]}}, @l2cap_conf_req={{0x4, 0x76, 0x12}, {0x1ff, 0x9cd4, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x3, 0x7f, 0x6, 0x2, 0x7, 0x800}}]}}, @l2cap_conn_req={{0x2, 0x2, 0x3}, {0x4, 0x5}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x14, 0x2}, {0xd9b}}]}}, 0x45) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_reconf_req={{0x19, 0x7f, 0x8}, {0x9, 0x817c, [0x800, 0xf1]}}}}, 0x15) [ 629.576971][ T2432] kworker/u4:5: attempt to access beyond end of device [ 629.576971][ T2432] loop3: rw=1, sector=44, nr_sectors = 2 limit=20 [ 629.609632][ T2432] Buffer I/O error on dev loop3, logical block 22, lost async page write 04:07:07 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x4c69, 0xfffffffffffffffd) [ 629.632348][ T2432] kworker/u4:5: attempt to access beyond end of device [ 629.632348][ T2432] loop3: rw=1, sector=46, nr_sectors = 2 limit=20 [ 629.689181][ T2432] Buffer I/O error on dev loop3, logical block 23, lost async page write [ 629.722809][ T23] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 629.747083][T11892] loop3: detected capacity change from 0 to 20 [ 629.780702][ T2432] kworker/u4:5: attempt to access beyond end of device [ 629.780702][ T2432] loop3: rw=1, sector=44, nr_sectors = 2 limit=20 [ 629.794573][ T2432] Buffer I/O error on dev loop3, logical block 22, lost async page write [ 629.803746][ T2432] kworker/u4:5: attempt to access beyond end of device [ 629.803746][ T2432] loop3: rw=1, sector=46, nr_sectors = 2 limit=20 [ 629.818662][ T2432] Buffer I/O error on dev loop3, logical block 23, lost async page write [ 629.842912][ T142] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 629.993171][ T23] usb 2-1: Using ep0 maxpacket: 16 [ 630.122707][ T142] usb 5-1: Using ep0 maxpacket: 16 [ 630.133190][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 630.262957][ T142] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 630.323268][ T23] usb 2-1: New USB device found, idVendor=15c2, idProduct=0040, bcdDevice=80.f3 [ 630.332547][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 630.340810][ T23] usb 2-1: Product: syz [ 630.345154][ T23] usb 2-1: Manufacturer: syz [ 630.349834][ T23] usb 2-1: SerialNumber: syz [ 630.358027][ T23] usb 2-1: config 0 descriptor?? [ 630.405285][ T23] input: iMON Panel, Knob and Mouse(15c2:0040) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input213 [ 630.473051][ T142] usb 5-1: New USB device found, idVendor=15c2, idProduct=0040, bcdDevice=80.f3 [ 630.482280][ T142] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 630.490422][ T142] usb 5-1: Product: syz [ 630.494765][ T142] usb 5-1: Manufacturer: syz [ 630.499465][ T142] usb 5-1: SerialNumber: syz [ 630.506001][ T142] usb 5-1: config 0 descriptor?? [ 630.544753][ T142] input: iMON Panel, Knob and Mouse(15c2:0040) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input215 [ 630.692887][ T23] rc_core: IR keymap rc-imon-pad not found [ 630.698875][ T23] Registered IR keymap rc-empty [ 630.704060][ T23] imon 2-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 630.714472][ T23] imon 2-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 630.823599][ T142] rc_core: IR keymap rc-imon-pad not found [ 630.829509][ T142] Registered IR keymap rc-empty [ 630.834636][ T142] imon 5-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 630.845578][ T142] imon 5-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 630.874238][ T23] rc rc0: iMON Remote (15c2:0040) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 630.887437][ T23] input: iMON Remote (15c2:0040) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input214 [ 630.902027][ T23] imon 2-1:0.0: iMON device (15c2:0040, intf0) on usb<2:76> initialized [ 630.972817][ T142] imon:send_packet: packet tx failed (-71) [ 630.993271][ T142] imon 5-1:0.0: remote input dev register failed [ 631.000214][ T142] imon 5-1:0.0: imon_init_intf0: rc device setup failed [ 631.043498][ T142] imon 5-1:0.0: unable to initialize intf0, err 0 [ 631.050093][ T142] imon:imon_probe: failed to initialize context! [ 631.053624][ T3692] usb 2-1: USB disconnect, device number 76 [ 631.058451][ T142] imon 5-1:0.0: unable to register, err -19 [ 631.093504][ T142] usb 5-1: USB disconnect, device number 60 04:07:08 executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000007c0)=ANY=[@ANYBLOB="1201000079201010c2154000f3800102030109021b0001000000000904000001e104550009058b0b40"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 04:07:08 executing program 2: syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x40}, @l2cap_cid_signaling={{0x3c}, [@l2cap_move_chan_req={{0xe, 0x0, 0x3}, {0xfffe, 0x8}}, @l2cap_conf_rsp={{0x5, 0x40, 0xd}, {0x101, 0x400, 0xb2fe, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x6}]}}, @l2cap_conf_req={{0x4, 0x76, 0x12}, {0x1ff, 0x9cd4, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x3, 0x7f, 0x6, 0x2, 0x7, 0x800}}]}}, @l2cap_conn_req={{0x2, 0x2, 0x3}, {0x4, 0x5}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x14, 0x2}, {0xd9b}}]}}, 0x45) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_reconf_req={{0x19, 0x7f, 0x8}, {0x9, 0x817c, [0x800, 0xf1]}}}}, 0x15) 04:07:09 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time_recursive\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001400)={&(0x7f00000013c0)='ext4_es_find_extent_range_enter\x00'}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r1, 0xff, 0x0, 0x0, 0x0) syncfs(r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r2, &(0x7f0000000000), 0x20b000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000200)='illinois\x00', 0x9) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000000)=0x2805, 0x4) r4 = openat(0xffffffffffffffff, &(0x7f00000002c0)='/proc/self/exe\x00', 0x0, 0x5) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f00000000c0)={0x4, &(0x7f0000000280)=[{0x87, 0x9}, {0x8, 0x60, 0x5, 0x6}, {0x3, 0xe1, 0x4, 0xfffff800}, {0x2, 0x8, 0xf0, 0xfffffff7}]}, 0x10) close(0xffffffffffffffff) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e20, @loopback}, 0x10) sendfile(r3, r4, 0x0, 0x90000) recvmsg(r3, &(0x7f0000000580)={0x0, 0x41, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4084, 0xfffffe1f}], 0x6, 0x0, 0xfffffffffffffcc9}, 0x700) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time_recursive\x00', 0x26e1, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001400)={&(0x7f00000013c0)='ext4_es_find_extent_range_enter\x00'}, 0x10) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) getsockopt(r1, 0xff, 0x0, 0x0, 0x0) (async) syncfs(r1) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async) write$cgroup_type(r2, &(0x7f0000000000), 0x20b000) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000200)='illinois\x00', 0x9) (async) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10) (async) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000000)=0x2805, 0x4) (async) openat(0xffffffffffffffff, &(0x7f00000002c0)='/proc/self/exe\x00', 0x0, 0x5) (async) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f00000000c0)={0x4, &(0x7f0000000280)=[{0x87, 0x9}, {0x8, 0x60, 0x5, 0x6}, {0x3, 0xe1, 0x4, 0xfffff800}, {0x2, 0x8, 0xf0, 0xfffffff7}]}, 0x10) (async) close(0xffffffffffffffff) (async) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e20, @loopback}, 0x10) (async) sendfile(r3, r4, 0x0, 0x90000) (async) recvmsg(r3, &(0x7f0000000580)={0x0, 0x41, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4084, 0xfffffe1f}], 0x6, 0x0, 0xfffffffffffffcc9}, 0x700) (async) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, 0x0) (async) 04:07:09 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x4c6a, 0xfffffffffffffffd) 04:07:09 executing program 3: r0 = syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="10000000000001000100050000000000ffffff7f200000005a4d", 0x1a, 0x400}, {&(0x7f0000000440)="ff00feffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff00ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff03f0ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffe1ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed41034844d6de4005", 0x809, 0x800}, {0x0, 0x0, 0x1400}], 0x0, &(0x7f0000000500)=ANY=[], 0x0) symlinkat(&(0x7f0000002940)='./file0\x00', r0, &(0x7f0000001900)='./file1\x00') syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="10000000000001000100050000000000ffffff7f200000005a4d", 0x1a, 0x400}, {&(0x7f0000000440)="ff00feffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff00ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff03f0ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffe1ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed41034844d6de4005", 0x809, 0x800}, {0x0, 0x0, 0x1400}], 0x0, &(0x7f0000000500)=ANY=[], 0x0) (async) symlinkat(&(0x7f0000002940)='./file0\x00', r0, &(0x7f0000001900)='./file1\x00') (async) 04:07:09 executing program 2: syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x40}, @l2cap_cid_signaling={{0x3c}, [@l2cap_move_chan_req={{0xe, 0x0, 0x3}, {0xfffe, 0x8}}, @l2cap_conf_rsp={{0x5, 0x40, 0xd}, {0x101, 0x400, 0xb2fe, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x6}]}}, @l2cap_conf_req={{0x4, 0x76, 0x12}, {0x1ff, 0x9cd4, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x3, 0x7f, 0x6, 0x2, 0x7, 0x800}}]}}, @l2cap_conn_req={{0x2, 0x2, 0x3}, {0x4, 0x5}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x14, 0x2}, {0xd9b}}]}}, 0x45) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_reconf_req={{0x19, 0x7f, 0x8}, {0x9, 0x817c, [0x800, 0xf1]}}}}, 0x15) 04:07:09 executing program 1: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000079201010c2154000f3800102030109021b0001000000000904000001e104550009058b0b40", @ANYBLOB="e567cc4674625970e97be8b314faa66da2986c0325087731233b08526781d79b1efb306fe6d5b474f7f9af9c7b31900d0e53ae3b4688324bc5303ad0d2d492dfb23bba6a7761c7ef4868369a05e0db1b191dc6420f0b021a16dadc1b48af81", @ANYRES16, @ANYRES8, @ANYRESDEC=0x0], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000939a12407d04015060a5000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000000)={0x14, &(0x7f0000000140)=ANY=[@ANYBLOB="00000f0000002341eb"], 0x0}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000b40)={0x24, &(0x7f0000000880)={0x0, 0xf, 0xd, {0xd, 0x0, "0618a6f40e4c4128996abf"}}, &(0x7f0000000a00)={0x0, 0x3, 0xb7, @string={0xb7, 0x3, "633ee6c9d5bd8f4a054085ecd9c17f6ac614de13c39f43bec5f39a42faa14bf2afd87501966dcced1df6674f084ad2ae475eb888cca4b4f3728eef49a346c6c342c9214bb9a29810c274cb7c007e204e1a05b3d73f7dc9aa23ecf415dff0baba3d81648b6b27a0cd1d967a5604ee352819f61d1bfa107c0e89eccd25b61edf1de51ce254cf8703ec8d84f73f6baf0f43daf041a121139c641ed289dbc8c4979e76ee1633acf7f34abf2a7ae0bb6cf687f663dc44c9"}}, &(0x7f0000000ac0)={0x0, 0x22, 0xc, {[@local=@item_012={0x2, 0x2, 0x0, "145a"}, @main=@item_012={0x2, 0x0, 0x8, "edc1"}, @local=@item_012={0x0, 0x2, 0x2}, @main=@item_4={0x3, 0x0, 0xb, "c06cee9b"}]}}, &(0x7f0000000b00)={0x0, 0x21, 0x9, {0x9, 0x21, 0x5, 0x1, 0x1, {0x22, 0xbe9}}}}, &(0x7f0000000d40)={0x2c, &(0x7f0000000b80)={0x20, 0x15, 0x57, "af4d3cddf5b7b54b294e243041b287309c1559d643c72da74a55a5c8391c7f7a74d896910179454bdff37a80de98a02c1003c469050f40512e83c7926a63a72fcf127a97f7bfcd0f342259e0c2255abac6009ad4d85b16"}, &(0x7f0000000c00)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000c40)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000c80)={0x20, 0x1, 0x69, "fde2bfd88293badda1fe384ac41bbc476cbceb21532c9aba5f983a30709bbc35742d7aee6000512a855a8e4c80873f41ab35c0043aa35c568387c54f902c9d4ba119fc8caf83571715fa09301caf7f1dbd28f1c4649ad8befee5ef1abfb3ecc95be1a288f2f20e37ae"}, &(0x7f0000000d00)={0x20, 0x3, 0x1, 0xff}}) syz_usb_control_io$hid(r0, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r3 = syz_usb_connect$uac1(0x1, 0xa9, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x97, 0x3, 0x1, 0x3, 0xd0, 0x28, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x800, 0x5}, [@output_terminal={0x9, 0x24, 0x3, 0x2, 0x306, 0x1, 0x6, 0xe1}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x6, 0x8, 0x1}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x8, 0x81, 0x41, {0x7, 0x25, 0x1, 0x1, 0x87, 0x84a}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0xe0, 0x1}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x2, 0x3, 0xe6, 0x2, "e39b", "faf9c0"}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x1f, 0x2, 0xff, 0x20, "232d92"}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x7ff, 0xfa0c, 0x6}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x0, 0x3, 0x4, {0x7, 0x25, 0x1, 0x82, 0x40, 0x1}}}}}}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x110, 0x4, 0x20, 0x6, 0x20, 0x81}, 0x41, &(0x7f00000001c0)={0x5, 0xf, 0x41, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x0, 0x8, 0x6}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x0, 0x5, 0x5}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0xf, 0x4, 0x1}, @ext_cap={0x7, 0x10, 0x2, 0xe, 0x2, 0x4, 0x4}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x1, 0xff, 0x40}, @ssp_cap={0x10, 0x10, 0xa, 0x3f, 0x1, 0x9, 0x7800, 0xea4, [0xffffc0]}]}, 0x1, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x280a}}]}) syz_usb_control_io(r3, &(0x7f00000004c0)={0x2c, &(0x7f00000002c0)={0x20, 0x1, 0xe8, {0xe8, 0x3, "7e04b39cfb69aa2c725c109b37b19d1c9ac8c65929c02b58ca3c259442297c28f44af199130c572c9f438c95873e99ab7be227ec09f26227d24b0c08e879e003092b4023abbd3c70b80710db709789517acb75fc2e8c1db0984f0cf2551c335cd0ad8bd06ffd609638de525f728d764b44745c1b50185690a20c2cc7f7ad1607f92e063797f8b9533cc3a0199902fdf7849ea955c834d0b3cd13e36c658604c6c71474a424587cd1e0ee46db628150f2e8dd8dd916a2acac0d7391f6562b044e41825a29cc9838b27340f051e187d5511deccf5108004eda90158dbef9691ec29583bc15adfd"}}, &(0x7f00000003c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x240a}}, &(0x7f00000009c0)={0x0, 0xf, 0x11, {0x5, 0xf, 0x11, 0x1, [@ssp_cap={0xc, 0x10, 0xa, 0x1, 0x0, 0x7f, 0xf}]}}, &(0x7f0000000440)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x2, 0x99, 0x0, "8c01234c", "824c48c2"}}, &(0x7f0000000480)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x2, 0x1f, 0x2, 0x76, 0xfff8, 0x9}}}, &(0x7f0000000900)={0x84, &(0x7f0000000500)={0x20, 0x0, 0x27, "4b2aa60adf697eb2efedf8204f8fc3eeebefdcd7036dbec181789bc4499d10ea79e32a036b75d0"}, &(0x7f0000000540)={0x0, 0xa, 0x1}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0x2}, &(0x7f00000005c0)={0x20, 0x0, 0x4, {0x5, 0x3}}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x80, 0x10}}, &(0x7f0000000640)={0x40, 0x7, 0x2, 0x7}, &(0x7f0000000680)={0x40, 0x9, 0x1, 0x8}, &(0x7f00000006c0)={0x40, 0xb, 0x2, '0\x00'}, &(0x7f0000000700)={0x40, 0xf, 0x2, 0x3}, &(0x7f0000000740)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000780)={0x40, 0x17, 0x6, @link_local}, &(0x7f00000007c0)={0x40, 0x19, 0x2, "b8bf"}, &(0x7f0000000800)={0x40, 0x1a, 0x2, 0x3f}, &(0x7f0000000840)={0x40, 0x1c, 0x1, 0x8}, &(0x7f0000000400)={0x40, 0x1e, 0x1, 0x80}, &(0x7f00000008c0)={0x40, 0x21, 0x1, 0x91}}) write$char_usb(r2, 0x0, 0x0) 04:07:09 executing program 2: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_USER_CONFIRM_NEG_REPLY}}, 0x7) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="03c800beba03544647172ef518e11d4093724a0621591091683538658a8642213171a5b9dd40d7710daeac6bb0f94d0760c2c84f84da9f0b3c356b2f6cc00a4da38c716de172e92584587dba4661ae331746c28e8103f7315b2d040975f18762d79c999323abab4cf78814dbe547f3d081bd6815c2a1e11a3125091a0903ecc674bbf64e7f0dedb832f690970a37082fc0ecf7f03ba255d8bb16dc27557562a04c2fa007c90d4a08a3b487c59062a845afaa7a68822f12c398795c382f572b7c7b13"], 0xc2) 04:07:09 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time_recursive\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001400)={&(0x7f00000013c0)='ext4_es_find_extent_range_enter\x00'}, 0x10) (async) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r1, 0xff, 0x0, 0x0, 0x0) (async) syncfs(r1) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r2, &(0x7f0000000000), 0x20b000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000200)='illinois\x00', 0x9) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10) (async) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000000)=0x2805, 0x4) r4 = openat(0xffffffffffffffff, &(0x7f00000002c0)='/proc/self/exe\x00', 0x0, 0x5) (async) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f00000000c0)={0x4, &(0x7f0000000280)=[{0x87, 0x9}, {0x8, 0x60, 0x5, 0x6}, {0x3, 0xe1, 0x4, 0xfffff800}, {0x2, 0x8, 0xf0, 0xfffffff7}]}, 0x10) (async) close(0xffffffffffffffff) (async) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e20, @loopback}, 0x10) sendfile(r3, r4, 0x0, 0x90000) (async) recvmsg(r3, &(0x7f0000000580)={0x0, 0x41, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4084, 0xfffffe1f}], 0x6, 0x0, 0xfffffffffffffcc9}, 0x700) (async) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, 0x0) 04:07:09 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x4c6b, 0xfffffffffffffffd) [ 631.600560][T11904] loop3: detected capacity change from 0 to 20 04:07:09 executing program 3: r0 = syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="10000000000001000100050000000000ffffff7f200000005a4d", 0x1a, 0x400}, {&(0x7f0000000440)="ff00feffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff00ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff03f0ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffe1ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed41034844d6de4005", 0x809, 0x800}, {0x0, 0x0, 0x1400}], 0x0, &(0x7f0000000500)=ANY=[], 0x0) symlinkat(&(0x7f0000002940)='./file0\x00', r0, &(0x7f0000001900)='./file1\x00') 04:07:09 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x4c6c, 0xfffffffffffffffd) [ 631.703652][ T57] kworker/u4:4: attempt to access beyond end of device [ 631.703652][ T57] loop3: rw=1, sector=44, nr_sectors = 2 limit=20 [ 631.745623][ T57] Buffer I/O error on dev loop3, logical block 22, lost async page write [ 631.767279][ T57] kworker/u4:4: attempt to access beyond end of device [ 631.767279][ T57] loop3: rw=1, sector=46, nr_sectors = 2 limit=20 [ 631.780849][ T142] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 631.802729][ T57] Buffer I/O error on dev loop3, logical block 23, lost async page write [ 631.858422][T11923] loop3: detected capacity change from 0 to 20 [ 631.860973][ T9814] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 631.891285][ T9] kworker/u4:0: attempt to access beyond end of device [ 631.891285][ T9] loop3: rw=1, sector=44, nr_sectors = 2 limit=20 [ 631.905182][ T9] Buffer I/O error on dev loop3, logical block 22, lost async page write [ 631.914441][ T9] kworker/u4:0: attempt to access beyond end of device [ 631.914441][ T9] loop3: rw=1, sector=46, nr_sectors = 2 limit=20 [ 631.922819][ T3692] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 631.928025][ T9] Buffer I/O error on dev loop3, logical block 23, lost async page write [ 632.052713][ T142] usb 5-1: Using ep0 maxpacket: 16 [ 632.184358][ T142] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 632.202818][ T3692] usb 2-1: Using ep0 maxpacket: 16 [ 632.352798][ T3692] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 103, changing to 10 [ 632.352951][ T142] usb 5-1: New USB device found, idVendor=15c2, idProduct=0040, bcdDevice=80.f3 [ 632.364110][ T3692] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 58688, setting to 1024 [ 632.378176][ T142] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 632.398281][ T142] usb 5-1: Product: syz [ 632.402451][ T142] usb 5-1: Manufacturer: syz [ 632.407140][ T142] usb 5-1: SerialNumber: syz [ 632.418686][ T142] usb 5-1: config 0 descriptor?? [ 632.465227][ T142] input: iMON Panel, Knob and Mouse(15c2:0040) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input217 [ 632.572935][ T3692] usb 2-1: New USB device found, idVendor=15c2, idProduct=0040, bcdDevice=80.f3 [ 632.582246][ T3692] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 632.590592][ T3692] usb 2-1: Product: syz [ 632.595413][ T3692] usb 2-1: Manufacturer: syz [ 632.600247][ T3692] usb 2-1: SerialNumber: syz [ 632.606374][ T3692] usb 2-1: config 0 descriptor?? [ 632.623276][T11909] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 632.656047][ T3692] input: iMON Panel, Knob and Mouse(15c2:0040) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input219 [ 632.762685][ T142] rc_core: IR keymap rc-imon-pad not found [ 632.768642][ T142] Registered IR keymap rc-empty [ 632.777256][ T142] imon 5-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 632.787561][ T142] imon 5-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 632.902785][ T142] imon:send_packet: packet tx failed (-71) [ 632.923404][ T142] imon 5-1:0.0: remote input dev register failed [ 632.929810][ T142] imon 5-1:0.0: imon_init_intf0: rc device setup failed [ 632.942929][ T3692] rc_core: IR keymap rc-imon-pad not found [ 632.948903][ T3692] Registered IR keymap rc-empty [ 632.954058][ T3692] imon 2-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 632.962742][ T142] imon 5-1:0.0: unable to initialize intf0, err 0 [ 632.964380][ T3692] imon 2-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 632.971146][ T142] imon:imon_probe: failed to initialize context! [ 632.986864][ T142] imon 5-1:0.0: unable to register, err -19 [ 632.995675][ T142] usb 5-1: USB disconnect, device number 61 [ 633.073868][T11909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 633.083841][T11909] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 633.143258][ T3692] rc rc1: iMON Remote (15c2:0040) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc1 [ 633.158111][ T3692] input: iMON Remote (15c2:0040) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc1/input220 [ 633.170608][ T3692] imon 2-1:0.0: iMON device (15c2:0040, intf0) on usb<2:77> initialized [ 633.192643][ C0] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 633.222644][ C0] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 633.242657][ C0] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 633.272655][ C0] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 633.302679][ C0] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 633.322676][ C0] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 633.328122][T11909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 633.339272][T11909] misc raw-gadget: fail, usb_gadget_register_driver returned -16 04:07:10 executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000007c0)=ANY=[@ANYBLOB="1201000079201010c2154000f3800102030109021b0001000000000904000001e104550009058b0b40"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 04:07:10 executing program 2: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_USER_CONFIRM_NEG_REPLY}}, 0x7) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="03c800beba03544647172ef518e11d4093724a0621591091683538658a8642213171a5b9dd40d7710daeac6bb0f94d0760c2c84f84da9f0b3c356b2f6cc00a4da38c716de172e92584587dba4661ae331746c28e8103f7315b2d040975f18762d79c999323abab4cf78814dbe547f3d081bd6815c2a1e11a3125091a0903ecc674bbf64e7f0dedb832f690970a37082fc0ecf7f03ba255d8bb16dc27557562a04c2fa007c90d4a08a3b487c59062a845afaa7a68822f12c398795c382f572b7c7b13"], 0xc2) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_USER_CONFIRM_NEG_REPLY}}, 0x7) (async) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="03c800beba03544647172ef518e11d4093724a0621591091683538658a8642213171a5b9dd40d7710daeac6bb0f94d0760c2c84f84da9f0b3c356b2f6cc00a4da38c716de172e92584587dba4661ae331746c28e8103f7315b2d040975f18762d79c999323abab4cf78814dbe547f3d081bd6815c2a1e11a3125091a0903ecc674bbf64e7f0dedb832f690970a37082fc0ecf7f03ba255d8bb16dc27557562a04c2fa007c90d4a08a3b487c59062a845afaa7a68822f12c398795c382f572b7c7b13"], 0xc2) (async) 04:07:10 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x4c6d, 0xfffffffffffffffd) 04:07:10 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time_recursive\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001400)={&(0x7f00000013c0)='ext4_es_find_extent_range_enter\x00'}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r1, 0xff, 0x0, 0x0, 0x0) syncfs(r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r2, &(0x7f0000000000), 0x20b000) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000200)='illinois\x00', 0x9) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000)=0x2805, 0x4) r3 = openat(0xffffffffffffffff, &(0x7f00000002c0)='/proc/self/exe\x00', 0x0, 0x5) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000280)={0x0, &(0x7f00000001c0)}, 0x10) close(0xffffffffffffffff) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e20, @loopback}, 0x10) sendfile(0xffffffffffffffff, r3, 0x0, 0x90000) recvmsg(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x41, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4084, 0xfffffe1f}], 0x6, 0x0, 0xfffffffffffffcc9}, 0x700) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, 0x0) 04:07:10 executing program 3: r0 = syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="10000000000001000100050000000000ffffff7f200000005a4d", 0x1a, 0x400}, {&(0x7f0000000c80)="ff00feffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff00ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff03f0ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffe1ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed41034844d6de4005", 0x809, 0x800}, {0x0, 0x0, 0x1400}], 0x0, &(0x7f0000000080)=ANY=[@ANYRESDEC=0x0, @ANYRES8=0x0], 0x0) symlinkat(&(0x7f0000002940)='./file0\x00', r0, &(0x7f0000001900)='./file1\x00') renameat(r0, &(0x7f0000000100)='./file0\x00', r0, &(0x7f0000000180)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0xc2) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) ioctl$SCSI_IOCTL_DOORLOCK(r1, 0x5380) [ 633.348527][T11909] imon:vfd_write: invalid payload size [ 633.354070][ C0] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 633.364246][ T142] usb 2-1: USB disconnect, device number 77 04:07:10 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x4c6e, 0xfffffffffffffffd) [ 633.430244][T11932] loop3: detected capacity change from 0 to 20 [ 633.493581][ T57] kworker/u4:4: attempt to access beyond end of device [ 633.493581][ T57] loop3: rw=1, sector=44, nr_sectors = 2 limit=20 [ 633.523058][ T57] Buffer I/O error on dev loop3, logical block 22, lost async page write [ 633.531605][ T57] kworker/u4:4: attempt to access beyond end of device [ 633.531605][ T57] loop3: rw=1, sector=46, nr_sectors = 2 limit=20 [ 633.548884][ T57] Buffer I/O error on dev loop3, logical block 23, lost async page write [ 633.752701][ T3692] usb 5-1: new high-speed USB device number 62 using dummy_hcd 04:07:11 executing program 1: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000079201010c2154000f3800102030109021b0001000000000904000001e104550009058b0b40", @ANYBLOB="e567cc4674625970e97be8b314faa66da2986c0325087731233b08526781d79b1efb306fe6d5b474f7f9af9c7b31900d0e53ae3b4688324bc5303ad0d2d492dfb23bba6a7761c7ef4868369a05e0db1b191dc6420f0b021a16dadc1b48af81", @ANYRES16, @ANYRES8, @ANYRESDEC=0x0], 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000939a12407d04015060a5000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000000)={0x14, &(0x7f0000000140)=ANY=[@ANYBLOB="00000f0000002341eb"], 0x0}, 0x0) (async) syz_usb_control_io(r1, 0x0, 0x0) (async) syz_usb_control_io$hid(r1, &(0x7f0000000b40)={0x24, &(0x7f0000000880)={0x0, 0xf, 0xd, {0xd, 0x0, "0618a6f40e4c4128996abf"}}, &(0x7f0000000a00)={0x0, 0x3, 0xb7, @string={0xb7, 0x3, "633ee6c9d5bd8f4a054085ecd9c17f6ac614de13c39f43bec5f39a42faa14bf2afd87501966dcced1df6674f084ad2ae475eb888cca4b4f3728eef49a346c6c342c9214bb9a29810c274cb7c007e204e1a05b3d73f7dc9aa23ecf415dff0baba3d81648b6b27a0cd1d967a5604ee352819f61d1bfa107c0e89eccd25b61edf1de51ce254cf8703ec8d84f73f6baf0f43daf041a121139c641ed289dbc8c4979e76ee1633acf7f34abf2a7ae0bb6cf687f663dc44c9"}}, &(0x7f0000000ac0)={0x0, 0x22, 0xc, {[@local=@item_012={0x2, 0x2, 0x0, "145a"}, @main=@item_012={0x2, 0x0, 0x8, "edc1"}, @local=@item_012={0x0, 0x2, 0x2}, @main=@item_4={0x3, 0x0, 0xb, "c06cee9b"}]}}, &(0x7f0000000b00)={0x0, 0x21, 0x9, {0x9, 0x21, 0x5, 0x1, 0x1, {0x22, 0xbe9}}}}, &(0x7f0000000d40)={0x2c, &(0x7f0000000b80)={0x20, 0x15, 0x57, "af4d3cddf5b7b54b294e243041b287309c1559d643c72da74a55a5c8391c7f7a74d896910179454bdff37a80de98a02c1003c469050f40512e83c7926a63a72fcf127a97f7bfcd0f342259e0c2255abac6009ad4d85b16"}, &(0x7f0000000c00)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000c40)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000c80)={0x20, 0x1, 0x69, "fde2bfd88293badda1fe384ac41bbc476cbceb21532c9aba5f983a30709bbc35742d7aee6000512a855a8e4c80873f41ab35c0043aa35c568387c54f902c9d4ba119fc8caf83571715fa09301caf7f1dbd28f1c4649ad8befee5ef1abfb3ecc95be1a288f2f20e37ae"}, &(0x7f0000000d00)={0x20, 0x3, 0x1, 0xff}}) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r3 = syz_usb_connect$uac1(0x1, 0xa9, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x97, 0x3, 0x1, 0x3, 0xd0, 0x28, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x800, 0x5}, [@output_terminal={0x9, 0x24, 0x3, 0x2, 0x306, 0x1, 0x6, 0xe1}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x6, 0x8, 0x1}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x8, 0x81, 0x41, {0x7, 0x25, 0x1, 0x1, 0x87, 0x84a}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0xe0, 0x1}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x2, 0x3, 0xe6, 0x2, "e39b", "faf9c0"}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x1f, 0x2, 0xff, 0x20, "232d92"}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x7ff, 0xfa0c, 0x6}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x0, 0x3, 0x4, {0x7, 0x25, 0x1, 0x82, 0x40, 0x1}}}}}}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x110, 0x4, 0x20, 0x6, 0x20, 0x81}, 0x41, &(0x7f00000001c0)={0x5, 0xf, 0x41, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x0, 0x8, 0x6}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x0, 0x5, 0x5}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0xf, 0x4, 0x1}, @ext_cap={0x7, 0x10, 0x2, 0xe, 0x2, 0x4, 0x4}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x1, 0xff, 0x40}, @ssp_cap={0x10, 0x10, 0xa, 0x3f, 0x1, 0x9, 0x7800, 0xea4, [0xffffc0]}]}, 0x1, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x280a}}]}) syz_usb_control_io(r3, &(0x7f00000004c0)={0x2c, &(0x7f00000002c0)={0x20, 0x1, 0xe8, {0xe8, 0x3, "7e04b39cfb69aa2c725c109b37b19d1c9ac8c65929c02b58ca3c259442297c28f44af199130c572c9f438c95873e99ab7be227ec09f26227d24b0c08e879e003092b4023abbd3c70b80710db709789517acb75fc2e8c1db0984f0cf2551c335cd0ad8bd06ffd609638de525f728d764b44745c1b50185690a20c2cc7f7ad1607f92e063797f8b9533cc3a0199902fdf7849ea955c834d0b3cd13e36c658604c6c71474a424587cd1e0ee46db628150f2e8dd8dd916a2acac0d7391f6562b044e41825a29cc9838b27340f051e187d5511deccf5108004eda90158dbef9691ec29583bc15adfd"}}, &(0x7f00000003c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x240a}}, &(0x7f00000009c0)={0x0, 0xf, 0x11, {0x5, 0xf, 0x11, 0x1, [@ssp_cap={0xc, 0x10, 0xa, 0x1, 0x0, 0x7f, 0xf}]}}, &(0x7f0000000440)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x2, 0x99, 0x0, "8c01234c", "824c48c2"}}, &(0x7f0000000480)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x2, 0x1f, 0x2, 0x76, 0xfff8, 0x9}}}, &(0x7f0000000900)={0x84, &(0x7f0000000500)={0x20, 0x0, 0x27, "4b2aa60adf697eb2efedf8204f8fc3eeebefdcd7036dbec181789bc4499d10ea79e32a036b75d0"}, &(0x7f0000000540)={0x0, 0xa, 0x1}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0x2}, &(0x7f00000005c0)={0x20, 0x0, 0x4, {0x5, 0x3}}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x80, 0x10}}, &(0x7f0000000640)={0x40, 0x7, 0x2, 0x7}, &(0x7f0000000680)={0x40, 0x9, 0x1, 0x8}, &(0x7f00000006c0)={0x40, 0xb, 0x2, '0\x00'}, &(0x7f0000000700)={0x40, 0xf, 0x2, 0x3}, &(0x7f0000000740)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000780)={0x40, 0x17, 0x6, @link_local}, &(0x7f00000007c0)={0x40, 0x19, 0x2, "b8bf"}, &(0x7f0000000800)={0x40, 0x1a, 0x2, 0x3f}, &(0x7f0000000840)={0x40, 0x1c, 0x1, 0x8}, &(0x7f0000000400)={0x40, 0x1e, 0x1, 0x80}, &(0x7f00000008c0)={0x40, 0x21, 0x1, 0x91}}) (async) write$char_usb(r2, 0x0, 0x0) 04:07:11 executing program 2: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_USER_CONFIRM_NEG_REPLY}}, 0x7) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="03c800beba03544647172ef518e11d4093724a0621591091683538658a8642213171a5b9dd40d7710daeac6bb0f94d0760c2c84f84da9f0b3c356b2f6cc00a4da38c716de172e92584587dba4661ae331746c28e8103f7315b2d040975f18762d79c999323abab4cf78814dbe547f3d081bd6815c2a1e11a3125091a0903ecc674bbf64e7f0dedb832f690970a37082fc0ecf7f03ba255d8bb16dc27557562a04c2fa007c90d4a08a3b487c59062a845afaa7a68822f12c398795c382f572b7c7b13"], 0xc2) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_USER_CONFIRM_NEG_REPLY}}, 0x7) (async) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="03c800beba03544647172ef518e11d4093724a0621591091683538658a8642213171a5b9dd40d7710daeac6bb0f94d0760c2c84f84da9f0b3c356b2f6cc00a4da38c716de172e92584587dba4661ae331746c28e8103f7315b2d040975f18762d79c999323abab4cf78814dbe547f3d081bd6815c2a1e11a3125091a0903ecc674bbf64e7f0dedb832f690970a37082fc0ecf7f03ba255d8bb16dc27557562a04c2fa007c90d4a08a3b487c59062a845afaa7a68822f12c398795c382f572b7c7b13"], 0xc2) (async) 04:07:11 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time_recursive\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001400)={&(0x7f00000013c0)='ext4_es_find_extent_range_enter\x00'}, 0x10) (async) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r1, 0xff, 0x0, 0x0, 0x0) (async) syncfs(r1) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r2, &(0x7f0000000000), 0x20b000) (async) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000200)='illinois\x00', 0x9) (async) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10) (async) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000)=0x2805, 0x4) (async) r3 = openat(0xffffffffffffffff, &(0x7f00000002c0)='/proc/self/exe\x00', 0x0, 0x5) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000280)={0x0, &(0x7f00000001c0)}, 0x10) (async) close(0xffffffffffffffff) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e20, @loopback}, 0x10) sendfile(0xffffffffffffffff, r3, 0x0, 0x90000) (async) recvmsg(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x41, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4084, 0xfffffe1f}], 0x6, 0x0, 0xfffffffffffffcc9}, 0x700) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, 0x0) 04:07:11 executing program 3: r0 = syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="10000000000001000100050000000000ffffff7f200000005a4d", 0x1a, 0x400}, {&(0x7f0000000c80)="ff00feffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff00ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff03f0ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffe1ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed41034844d6de4005", 0x809, 0x800}, {0x0, 0x0, 0x1400}], 0x0, &(0x7f0000000080)=ANY=[@ANYRESDEC=0x0, @ANYRES8=0x0], 0x0) symlinkat(&(0x7f0000002940)='./file0\x00', r0, &(0x7f0000001900)='./file1\x00') renameat(r0, &(0x7f0000000100)='./file0\x00', r0, &(0x7f0000000180)='./file0\x00') (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0xc2) (async) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) ioctl$SCSI_IOCTL_DOORLOCK(r1, 0x5380) 04:07:11 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x4c6f, 0xfffffffffffffffd) 04:07:11 executing program 2: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_USER_CONFIRM_NEG_REPLY}}, 0x7) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6a}, "5034c26c4a3f5c2f06ce56d18ecfdc9bf6099d81a16cd8de4faadb196b2e0b843005a5856f3ed2c4399ec5c0ef1cb39422d7873f7eac872c3d1a7552bbc415963f6cb83c5809be7d43548549e152970c482525b9d33f44fa1caadb7a607b2ea1f97a3cebe17d3be845b3"}, 0x6e) [ 633.895722][T11943] loop3: detected capacity change from 0 to 20 [ 633.965168][ T57] kworker/u4:4: attempt to access beyond end of device [ 633.965168][ T57] loop3: rw=1, sector=44, nr_sectors = 2 limit=20 [ 633.992670][ T3692] usb 5-1: Using ep0 maxpacket: 16 [ 634.000370][ T57] Buffer I/O error on dev loop3, logical block 22, lost async page write [ 634.012433][ T57] kworker/u4:4: attempt to access beyond end of device [ 634.012433][ T57] loop3: rw=1, sector=46, nr_sectors = 2 limit=20 [ 634.030757][ T57] Buffer I/O error on dev loop3, logical block 23, lost async page write [ 634.122882][ T3692] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 634.212816][ T15] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 634.292809][ T3692] usb 5-1: New USB device found, idVendor=15c2, idProduct=0040, bcdDevice=80.f3 [ 634.301976][ T3692] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 634.310083][ T3692] usb 5-1: Product: syz [ 634.314558][ T3692] usb 5-1: Manufacturer: syz [ 634.319175][ T3692] usb 5-1: SerialNumber: syz [ 634.330436][ T3692] usb 5-1: config 0 descriptor?? [ 634.375474][ T3692] input: iMON Panel, Knob and Mouse(15c2:0040) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input221 [ 634.452802][ T15] usb 2-1: Using ep0 maxpacket: 16 [ 634.583023][ T15] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 103, changing to 10 [ 634.594544][ T15] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 58688, setting to 1024 [ 634.663188][ T3692] rc_core: IR keymap rc-imon-pad not found [ 634.669072][ T3692] Registered IR keymap rc-empty [ 634.677910][ T3692] imon 5-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 634.689353][ T3692] imon 5-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 634.762928][ T15] usb 2-1: New USB device found, idVendor=15c2, idProduct=0040, bcdDevice=80.f3 [ 634.772198][ T15] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 634.786745][ T15] usb 2-1: Product: syz [ 634.791561][ T15] usb 2-1: Manufacturer: syz [ 634.796384][ T3692] imon:send_packet: packet tx failed (-71) [ 634.802369][ T15] usb 2-1: SerialNumber: syz [ 634.811040][ T15] usb 2-1: config 0 descriptor?? [ 634.816290][ T3692] imon 5-1:0.0: remote input dev register failed [ 634.822946][ T3692] imon 5-1:0.0: imon_init_intf0: rc device setup failed [ 634.842997][ T3692] imon 5-1:0.0: unable to initialize intf0, err 0 [ 634.843170][T11956] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 634.852862][ T3692] imon:imon_probe: failed to initialize context! [ 634.869047][ T15] input: iMON Panel, Knob and Mouse(15c2:0040) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input223 [ 634.881119][ T3692] imon 5-1:0.0: unable to register, err -19 [ 634.892571][ T3692] usb 5-1: USB disconnect, device number 62 [ 635.064861][T11959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 635.078632][T11959] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 635.152821][ T15] rc_core: IR keymap rc-imon-pad not found [ 635.158826][ T15] Registered IR keymap rc-empty [ 635.164494][ T15] imon 2-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 635.174916][ T15] imon 2-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 635.192816][ T15] imon:send_packet: packet tx failed (-71) [ 635.212902][ T15] imon 2-1:0.0: remote input dev register failed [ 635.219311][ T15] imon 2-1:0.0: imon_init_intf0: rc device setup failed [ 635.232861][ T15] imon 2-1:0.0: unable to initialize intf0, err 0 [ 635.239344][ T15] imon:imon_probe: failed to initialize context! [ 635.245820][ T15] imon 2-1:0.0: unable to register, err -19 04:07:12 executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000007c0)=ANY=[@ANYBLOB="1201000079201010c2154000f3800102030109021b0001000000000904000001e104550009058b0b40"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) 04:07:12 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x4c70, 0xfffffffffffffffd) 04:07:12 executing program 3: r0 = syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="10000000000001000100050000000000ffffff7f200000005a4d", 0x1a, 0x400}, {&(0x7f0000000c80)="ff00feffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff00ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff03f0ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffe1ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed41034844d6de4005", 0x809, 0x800}, {0x0, 0x0, 0x1400}], 0x0, &(0x7f0000000080)=ANY=[@ANYRESDEC=0x0, @ANYRES8=0x0], 0x0) symlinkat(&(0x7f0000002940)='./file0\x00', r0, &(0x7f0000001900)='./file1\x00') renameat(r0, &(0x7f0000000100)='./file0\x00', r0, &(0x7f0000000180)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0xc2) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) ioctl$SCSI_IOCTL_DOORLOCK(r1, 0x5380) syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="10000000000001000100050000000000ffffff7f200000005a4d", 0x1a, 0x400}, {&(0x7f0000000c80)="ff00feffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff00ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff03f0ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffe1ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed41034844d6de4005", 0x809, 0x800}, {0x0, 0x0, 0x1400}], 0x0, &(0x7f0000000080)=ANY=[@ANYRESDEC=0x0, @ANYRES8=0x0], 0x0) (async) symlinkat(&(0x7f0000002940)='./file0\x00', r0, &(0x7f0000001900)='./file1\x00') (async) renameat(r0, &(0x7f0000000100)='./file0\x00', r0, &(0x7f0000000180)='./file0\x00') (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0xc2) (async) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) (async) ioctl$SCSI_IOCTL_DOORLOCK(r1, 0x5380) (async) 04:07:12 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time_recursive\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001400)={&(0x7f00000013c0)='ext4_es_find_extent_range_enter\x00'}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r1, 0xff, 0x0, 0x0, 0x0) syncfs(r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r2, &(0x7f0000000000), 0x20b000) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000200)='illinois\x00', 0x9) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000)=0x2805, 0x4) r3 = openat(0xffffffffffffffff, &(0x7f00000002c0)='/proc/self/exe\x00', 0x0, 0x5) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000280)={0x0, &(0x7f00000001c0)}, 0x10) close(0xffffffffffffffff) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e20, @loopback}, 0x10) sendfile(0xffffffffffffffff, r3, 0x0, 0x90000) recvmsg(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x41, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4084, 0xfffffe1f}], 0x6, 0x0, 0xfffffffffffffcc9}, 0x700) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time_recursive\x00', 0x26e1, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001400)={&(0x7f00000013c0)='ext4_es_find_extent_range_enter\x00'}, 0x10) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) getsockopt(r1, 0xff, 0x0, 0x0, 0x0) (async) syncfs(r1) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async) write$cgroup_type(r2, &(0x7f0000000000), 0x20b000) (async) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000200)='illinois\x00', 0x9) (async) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10) (async) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000)=0x2805, 0x4) (async) openat(0xffffffffffffffff, &(0x7f00000002c0)='/proc/self/exe\x00', 0x0, 0x5) (async) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000280)={0x0, &(0x7f00000001c0)}, 0x10) (async) close(0xffffffffffffffff) (async) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e20, @loopback}, 0x10) (async) sendfile(0xffffffffffffffff, r3, 0x0, 0x90000) (async) recvmsg(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x41, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4084, 0xfffffe1f}], 0x6, 0x0, 0xfffffffffffffcc9}, 0x700) (async) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, 0x0) (async) 04:07:12 executing program 2: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_USER_CONFIRM_NEG_REPLY}}, 0x7) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6a}, "5034c26c4a3f5c2f06ce56d18ecfdc9bf6099d81a16cd8de4faadb196b2e0b843005a5856f3ed2c4399ec5c0ef1cb39422d7873f7eac872c3d1a7552bbc415963f6cb83c5809be7d43548549e152970c482525b9d33f44fa1caadb7a607b2ea1f97a3cebe17d3be845b3"}, 0x6e) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_USER_CONFIRM_NEG_REPLY}}, 0x7) (async) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6a}, "5034c26c4a3f5c2f06ce56d18ecfdc9bf6099d81a16cd8de4faadb196b2e0b843005a5856f3ed2c4399ec5c0ef1cb39422d7873f7eac872c3d1a7552bbc415963f6cb83c5809be7d43548549e152970c482525b9d33f44fa1caadb7a607b2ea1f97a3cebe17d3be845b3"}, 0x6e) (async) 04:07:12 executing program 1: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000079201010c2154000f3800102030109021b0001000000000904000001e104550009058b0b40", @ANYBLOB="e567cc4674625970e97be8b314faa66da2986c0325087731233b08526781d79b1efb306fe6d5b474f7f9af9c7b31900d0e53ae3b4688324bc5303ad0d2d492dfb23bba6a7761c7ef4868369a05e0db1b191dc6420f0b021a16dadc1b48af81", @ANYRES16, @ANYRES8, @ANYRESDEC=0x0], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000939a12407d04015060a5000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000000)={0x14, &(0x7f0000000140)=ANY=[@ANYBLOB="00000f0000002341eb"], 0x0}, 0x0) (async) syz_usb_control_io(r1, 0x0, 0x0) (async) syz_usb_control_io$hid(r1, &(0x7f0000000b40)={0x24, &(0x7f0000000880)={0x0, 0xf, 0xd, {0xd, 0x0, "0618a6f40e4c4128996abf"}}, &(0x7f0000000a00)={0x0, 0x3, 0xb7, @string={0xb7, 0x3, "633ee6c9d5bd8f4a054085ecd9c17f6ac614de13c39f43bec5f39a42faa14bf2afd87501966dcced1df6674f084ad2ae475eb888cca4b4f3728eef49a346c6c342c9214bb9a29810c274cb7c007e204e1a05b3d73f7dc9aa23ecf415dff0baba3d81648b6b27a0cd1d967a5604ee352819f61d1bfa107c0e89eccd25b61edf1de51ce254cf8703ec8d84f73f6baf0f43daf041a121139c641ed289dbc8c4979e76ee1633acf7f34abf2a7ae0bb6cf687f663dc44c9"}}, &(0x7f0000000ac0)={0x0, 0x22, 0xc, {[@local=@item_012={0x2, 0x2, 0x0, "145a"}, @main=@item_012={0x2, 0x0, 0x8, "edc1"}, @local=@item_012={0x0, 0x2, 0x2}, @main=@item_4={0x3, 0x0, 0xb, "c06cee9b"}]}}, &(0x7f0000000b00)={0x0, 0x21, 0x9, {0x9, 0x21, 0x5, 0x1, 0x1, {0x22, 0xbe9}}}}, &(0x7f0000000d40)={0x2c, &(0x7f0000000b80)={0x20, 0x15, 0x57, "af4d3cddf5b7b54b294e243041b287309c1559d643c72da74a55a5c8391c7f7a74d896910179454bdff37a80de98a02c1003c469050f40512e83c7926a63a72fcf127a97f7bfcd0f342259e0c2255abac6009ad4d85b16"}, &(0x7f0000000c00)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000c40)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000c80)={0x20, 0x1, 0x69, "fde2bfd88293badda1fe384ac41bbc476cbceb21532c9aba5f983a30709bbc35742d7aee6000512a855a8e4c80873f41ab35c0043aa35c568387c54f902c9d4ba119fc8caf83571715fa09301caf7f1dbd28f1c4649ad8befee5ef1abfb3ecc95be1a288f2f20e37ae"}, &(0x7f0000000d00)={0x20, 0x3, 0x1, 0xff}}) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r3 = syz_usb_connect$uac1(0x1, 0xa9, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x97, 0x3, 0x1, 0x3, 0xd0, 0x28, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x800, 0x5}, [@output_terminal={0x9, 0x24, 0x3, 0x2, 0x306, 0x1, 0x6, 0xe1}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x6, 0x8, 0x1}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x8, 0x81, 0x41, {0x7, 0x25, 0x1, 0x1, 0x87, 0x84a}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0xe0, 0x1}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x2, 0x3, 0xe6, 0x2, "e39b", "faf9c0"}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x1f, 0x2, 0xff, 0x20, "232d92"}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x7ff, 0xfa0c, 0x6}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x0, 0x3, 0x4, {0x7, 0x25, 0x1, 0x82, 0x40, 0x1}}}}}}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x110, 0x4, 0x20, 0x6, 0x20, 0x81}, 0x41, &(0x7f00000001c0)={0x5, 0xf, 0x41, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x0, 0x8, 0x6}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x0, 0x5, 0x5}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0xf, 0x4, 0x1}, @ext_cap={0x7, 0x10, 0x2, 0xe, 0x2, 0x4, 0x4}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x1, 0xff, 0x40}, @ssp_cap={0x10, 0x10, 0xa, 0x3f, 0x1, 0x9, 0x7800, 0xea4, [0xffffc0]}]}, 0x1, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x280a}}]}) syz_usb_control_io(r3, &(0x7f00000004c0)={0x2c, &(0x7f00000002c0)={0x20, 0x1, 0xe8, {0xe8, 0x3, "7e04b39cfb69aa2c725c109b37b19d1c9ac8c65929c02b58ca3c259442297c28f44af199130c572c9f438c95873e99ab7be227ec09f26227d24b0c08e879e003092b4023abbd3c70b80710db709789517acb75fc2e8c1db0984f0cf2551c335cd0ad8bd06ffd609638de525f728d764b44745c1b50185690a20c2cc7f7ad1607f92e063797f8b9533cc3a0199902fdf7849ea955c834d0b3cd13e36c658604c6c71474a424587cd1e0ee46db628150f2e8dd8dd916a2acac0d7391f6562b044e41825a29cc9838b27340f051e187d5511deccf5108004eda90158dbef9691ec29583bc15adfd"}}, &(0x7f00000003c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x240a}}, &(0x7f00000009c0)={0x0, 0xf, 0x11, {0x5, 0xf, 0x11, 0x1, [@ssp_cap={0xc, 0x10, 0xa, 0x1, 0x0, 0x7f, 0xf}]}}, &(0x7f0000000440)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x2, 0x99, 0x0, "8c01234c", "824c48c2"}}, &(0x7f0000000480)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x2, 0x1f, 0x2, 0x76, 0xfff8, 0x9}}}, &(0x7f0000000900)={0x84, &(0x7f0000000500)={0x20, 0x0, 0x27, "4b2aa60adf697eb2efedf8204f8fc3eeebefdcd7036dbec181789bc4499d10ea79e32a036b75d0"}, &(0x7f0000000540)={0x0, 0xa, 0x1}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0x2}, &(0x7f00000005c0)={0x20, 0x0, 0x4, {0x5, 0x3}}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x80, 0x10}}, &(0x7f0000000640)={0x40, 0x7, 0x2, 0x7}, &(0x7f0000000680)={0x40, 0x9, 0x1, 0x8}, &(0x7f00000006c0)={0x40, 0xb, 0x2, '0\x00'}, &(0x7f0000000700)={0x40, 0xf, 0x2, 0x3}, &(0x7f0000000740)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000780)={0x40, 0x17, 0x6, @link_local}, &(0x7f00000007c0)={0x40, 0x19, 0x2, "b8bf"}, &(0x7f0000000800)={0x40, 0x1a, 0x2, 0x3f}, &(0x7f0000000840)={0x40, 0x1c, 0x1, 0x8}, &(0x7f0000000400)={0x40, 0x1e, 0x1, 0x80}, &(0x7f00000008c0)={0x40, 0x21, 0x1, 0x91}}) (async) write$char_usb(r2, 0x0, 0x0) 04:07:12 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x4c71, 0xfffffffffffffffd) [ 635.277644][ T15] usb 2-1: USB disconnect, device number 78 [ 635.313661][T11967] loop3: detected capacity change from 0 to 20 04:07:12 executing program 2: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_USER_CONFIRM_NEG_REPLY}}, 0x7) (async) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x6a}, "5034c26c4a3f5c2f06ce56d18ecfdc9bf6099d81a16cd8de4faadb196b2e0b843005a5856f3ed2c4399ec5c0ef1cb39422d7873f7eac872c3d1a7552bbc415963f6cb83c5809be7d43548549e152970c482525b9d33f44fa1caadb7a607b2ea1f97a3cebe17d3be845b3"}, 0x6e) 04:07:12 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time_recursive\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0xfffffffffffffdda) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001400)={&(0x7f00000013c0)='ext4_lazy_itable_init\x00'}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r1, 0xff, 0x0, 0x0, 0x0) syncfs(r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r2, &(0x7f0000000000), 0x20b000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000200)='illinois\x00', 0x9) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000000)=0x2805, 0x4) r4 = openat(0xffffffffffffffff, &(0x7f00000002c0)='/proc/self/exe\x00', 0x0, 0x5) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000280)={0x0, &(0x7f00000001c0)}, 0x10) close(0xffffffffffffffff) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e20, @loopback}, 0x10) sendfile(r3, r4, 0x0, 0x90000) recvmsg(r3, &(0x7f0000000580)={0x0, 0x41, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4084, 0xfffffe1f}], 0x6, 0x0, 0xfffffffffffffcc9}, 0x700) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, 0x0) 04:07:12 executing program 3: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="10000000000001000100050000000000ffffff7f200000005a4d", 0x1a, 0x400}, {&(0x7f0000000440)="ff00feffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff00ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff03f0ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffe1ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed41034844d6de4005", 0x809, 0x800}, {0x0, 0x0, 0x1400}], 0x0, &(0x7f0000000500)=ANY=[], 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x2f, 0x81, 0x7f, 0x504, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, 0x1, 0x8000, 0x80000001, 0x4}}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newqdisc={0x24}, 0x24}}, 0x0) r4 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x4040, 0x0) sendmsg$nl_route(r4, &(0x7f0000000e00)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000400)=@newlinkprop={0x20, 0x6c, 0x108, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r0, 0x10280, 0x32000}}, 0x20}}, 0x88802) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000008a40)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x2, 0xffff}}}, 0x24}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'tunl0\x00', &(0x7f0000000280)={'gretap0\x00', 0x0, 0x8020, 0x700, 0x0, 0x2, {{0x2f, 0x4, 0x1, 0x3, 0xbc, 0x68, 0x0, 0x40, 0x2f, 0x0, @remote, @empty, {[@ra={0x94, 0x4, 0x1}, @end, @timestamp_addr={0x44, 0xc, 0xcf, 0x1, 0x9, [{@local, 0xffffffff}]}, @cipso={0x86, 0x5d, 0x3, [{0x0, 0xa, "eacee034976f73ad"}, {0x1, 0xd, "7f8903aa3d2850e8878b97"}, {0x2, 0xa, "f7682af36f8c8f0c"}, {0x5, 0x2}, {0x6, 0xa, "0a6fc35b39a3aeb0"}, {0x2, 0x11, "bfa621b28c5e51ce4ae02ed811c9e7"}, {0x5, 0x4, "f37b"}, {0x0, 0x7, "89fd8b6676"}, {0x7, 0xe, "839c3a11f9172eb0964bb3c8"}]}, @timestamp_prespec={0x44, 0x14, 0x79, 0x3, 0x9, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@multicast2, 0x4}]}, @cipso={0x86, 0x18, 0x1, [{0x6, 0x8, "7bbf14ea4e70"}, {0x7, 0x6, "124b29f2"}, {0x7, 0x4, "982a"}]}, @timestamp_addr={0x44, 0xc, 0x8b, 0x1, 0xe, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}]}]}}}}}) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000c80)={0x124, 0x0, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x94, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x44000}, 0x40) 04:07:12 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x4c72, 0xfffffffffffffffd) 04:07:12 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="8ea5e4030000000000000085765f3b2c2eebced3"], 0x7) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x0, 0xa}, @l2cap_cid_signaling={{0x6}, [@l2cap_info_req={{0xa, 0x9, 0x2}, {0x3000}}]}}, 0xf) [ 635.427605][ T9] kworker/u4:0: attempt to access beyond end of device [ 635.427605][ T9] loop3: rw=1, sector=44, nr_sectors = 2 limit=20 [ 635.480341][ T9] Buffer I/O error on dev loop3, logical block 22, lost async page write [ 635.511646][ T9] kworker/u4:0: attempt to access beyond end of device [ 635.511646][ T9] loop3: rw=1, sector=46, nr_sectors = 2 limit=20 [ 635.530278][ T9] Buffer I/O error on dev loop3, logical block 23, lost async page write [ 635.560982][T12001] loop3: detected capacity change from 0 to 20 [ 635.575479][ T27] audit: type=1800 audit(1664078833.013:359): pid=12001 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=".pending_reads" dev="sda1" ino=1170 res=0 errno=0 [ 635.599593][T12001] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 635.672853][ T3692] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 635.702747][ T15] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 635.922950][ T3692] usb 5-1: Using ep0 maxpacket: 16 [ 635.952810][ T15] usb 2-1: Using ep0 maxpacket: 16 [ 636.053461][ T3692] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 636.083241][ T15] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 103, changing to 10 [ 636.094586][ T15] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 58688, setting to 1024 [ 636.262900][ T3692] usb 5-1: New USB device found, idVendor=15c2, idProduct=0040, bcdDevice=80.f3 [ 636.272095][ T3692] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 636.280643][ T3692] usb 5-1: Product: syz [ 636.285013][ T3692] usb 5-1: Manufacturer: syz [ 636.289643][ T3692] usb 5-1: SerialNumber: syz [ 636.298631][ T3692] usb 5-1: config 0 descriptor?? [ 636.312921][ T15] usb 2-1: New USB device found, idVendor=15c2, idProduct=0040, bcdDevice=80.f3 [ 636.322007][ T15] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 636.330910][ T15] usb 2-1: Product: syz [ 636.335156][ T15] usb 2-1: Manufacturer: syz [ 636.339761][ T15] usb 2-1: SerialNumber: syz [ 636.347006][ T3692] input: iMON Panel, Knob and Mouse(15c2:0040) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input225 [ 636.360746][ T15] usb 2-1: config 0 descriptor?? [ 636.383270][T11970] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 636.410603][ T15] input: iMON Panel, Knob and Mouse(15c2:0040) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input227 [ 636.633003][ T3692] rc_core: IR keymap rc-imon-pad not found [ 636.639014][ T3692] Registered IR keymap rc-empty [ 636.644183][ T3692] imon 5-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 636.654473][ T3692] imon 5-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 636.702960][ T15] rc_core: IR keymap rc-imon-pad not found [ 636.709340][ T15] Registered IR keymap rc-empty [ 636.718531][ T15] imon 2-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 636.728710][ T15] imon 2-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 636.782903][ T3692] imon:send_packet: packet tx failed (-71) [ 636.803128][ T3692] imon 5-1:0.0: remote input dev register failed [ 636.809575][ T3692] imon 5-1:0.0: imon_init_intf0: rc device setup failed [ 636.822825][ T3692] imon 5-1:0.0: unable to initialize intf0, err 0 [ 636.829342][ T3692] imon:imon_probe: failed to initialize context! [ 636.830097][T11970] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 636.840739][ T3692] imon 5-1:0.0: unable to register, err -19 [ 636.845879][T11970] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 636.856558][ T3692] usb 5-1: USB disconnect, device number 63 [ 636.902831][ T15] imon:send_packet: packet tx failed (-71) [ 636.925338][ T15] imon 2-1:0.0: remote input dev register failed [ 636.931816][ T15] imon 2-1:0.0: imon_init_intf0: rc device setup failed [ 636.942826][ T15] imon 2-1:0.0: unable to initialize intf0, err 0 [ 636.949354][ T15] imon:imon_probe: failed to initialize context! [ 636.956524][ T15] imon 2-1:0.0: unable to register, err -19 [ 636.969430][ T15] usb 2-1: USB disconnect, device number 79 04:07:14 executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000007c0)=ANY=[@ANYBLOB="1201000079201010c2154000f3800102030109021b0001000000000904000001e104550009058b0b40"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) 04:07:14 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time_recursive\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0xfffffffffffffdda) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001400)={&(0x7f00000013c0)='ext4_lazy_itable_init\x00'}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r1, 0xff, 0x0, 0x0, 0x0) (async) syncfs(r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r2, &(0x7f0000000000), 0x20b000) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000200)='illinois\x00', 0x9) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10) (async, rerun: 64) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000000)=0x2805, 0x4) (async, rerun: 64) r4 = openat(0xffffffffffffffff, &(0x7f00000002c0)='/proc/self/exe\x00', 0x0, 0x5) (async) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000280)={0x0, &(0x7f00000001c0)}, 0x10) close(0xffffffffffffffff) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e20, @loopback}, 0x10) (async) sendfile(r3, r4, 0x0, 0x90000) recvmsg(r3, &(0x7f0000000580)={0x0, 0x41, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4084, 0xfffffe1f}], 0x6, 0x0, 0xfffffffffffffcc9}, 0x700) (async) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, 0x0) 04:07:14 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x4c73, 0xfffffffffffffffd) 04:07:14 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="8ea5e4030000000000000085765f3b2c2eebced3"], 0x7) (async, rerun: 32) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x0, 0xa}, @l2cap_cid_signaling={{0x6}, [@l2cap_info_req={{0xa, 0x9, 0x2}, {0x3000}}]}}, 0xf) (rerun: 32) 04:07:14 executing program 3: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="10000000000001000100050000000000ffffff7f200000005a4d", 0x1a, 0x400}, {&(0x7f0000000440)="ff00feffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff00ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff03f0ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffe1ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed41034844d6de4005", 0x809, 0x800}, {0x0, 0x0, 0x1400}], 0x0, &(0x7f0000000500)=ANY=[], 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x2f, 0x81, 0x7f, 0x504, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, 0x1, 0x8000, 0x80000001, 0x4}}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newqdisc={0x24}, 0x24}}, 0x0) (async) r4 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x4040, 0x0) sendmsg$nl_route(r4, &(0x7f0000000e00)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000400)=@newlinkprop={0x20, 0x6c, 0x108, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r0, 0x10280, 0x32000}}, 0x20}}, 0x88802) (async) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000008a40)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x2, 0xffff}}}, 0x24}}, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'tunl0\x00', &(0x7f0000000280)={'gretap0\x00', 0x0, 0x8020, 0x700, 0x0, 0x2, {{0x2f, 0x4, 0x1, 0x3, 0xbc, 0x68, 0x0, 0x40, 0x2f, 0x0, @remote, @empty, {[@ra={0x94, 0x4, 0x1}, @end, @timestamp_addr={0x44, 0xc, 0xcf, 0x1, 0x9, [{@local, 0xffffffff}]}, @cipso={0x86, 0x5d, 0x3, [{0x0, 0xa, "eacee034976f73ad"}, {0x1, 0xd, "7f8903aa3d2850e8878b97"}, {0x2, 0xa, "f7682af36f8c8f0c"}, {0x5, 0x2}, {0x6, 0xa, "0a6fc35b39a3aeb0"}, {0x2, 0x11, "bfa621b28c5e51ce4ae02ed811c9e7"}, {0x5, 0x4, "f37b"}, {0x0, 0x7, "89fd8b6676"}, {0x7, 0xe, "839c3a11f9172eb0964bb3c8"}]}, @timestamp_prespec={0x44, 0x14, 0x79, 0x3, 0x9, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@multicast2, 0x4}]}, @cipso={0x86, 0x18, 0x1, [{0x6, 0x8, "7bbf14ea4e70"}, {0x7, 0x6, "124b29f2"}, {0x7, 0x4, "982a"}]}, @timestamp_addr={0x44, 0xc, 0x8b, 0x1, 0xe, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}]}]}}}}}) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000c80)={0x124, 0x0, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x94, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x44000}, 0x40) 04:07:14 executing program 1: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) 04:07:14 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x4c74, 0xfffffffffffffffd) 04:07:14 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="8ea5e4030000000000000085765f3b2c2eebced3"], 0x7) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x0, 0xa}, @l2cap_cid_signaling={{0x6}, [@l2cap_info_req={{0xa, 0x9, 0x2}, {0x3000}}]}}, 0xf) [ 637.313296][T12019] loop3: detected capacity change from 0 to 20 04:07:14 executing program 3: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="10000000000001000100050000000000ffffff7f200000005a4d", 0x1a, 0x400}, {&(0x7f0000000440)="ff00feffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff00ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff03f0ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffe1ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed41034844d6de4005", 0x809, 0x800}, {0x0, 0x0, 0x1400}], 0x0, &(0x7f0000000500)=ANY=[], 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x2f, 0x81, 0x7f, 0x504, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, 0x1, 0x8000, 0x80000001, 0x4}}) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newqdisc={0x24}, 0x24}}, 0x0) (async) r4 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x4040, 0x0) sendmsg$nl_route(r4, &(0x7f0000000e00)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000400)=@newlinkprop={0x20, 0x6c, 0x108, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r0, 0x10280, 0x32000}}, 0x20}}, 0x88802) (async) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000008a40)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x2, 0xffff}}}, 0x24}}, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'tunl0\x00', &(0x7f0000000280)={'gretap0\x00', 0x0, 0x8020, 0x700, 0x0, 0x2, {{0x2f, 0x4, 0x1, 0x3, 0xbc, 0x68, 0x0, 0x40, 0x2f, 0x0, @remote, @empty, {[@ra={0x94, 0x4, 0x1}, @end, @timestamp_addr={0x44, 0xc, 0xcf, 0x1, 0x9, [{@local, 0xffffffff}]}, @cipso={0x86, 0x5d, 0x3, [{0x0, 0xa, "eacee034976f73ad"}, {0x1, 0xd, "7f8903aa3d2850e8878b97"}, {0x2, 0xa, "f7682af36f8c8f0c"}, {0x5, 0x2}, {0x6, 0xa, "0a6fc35b39a3aeb0"}, {0x2, 0x11, "bfa621b28c5e51ce4ae02ed811c9e7"}, {0x5, 0x4, "f37b"}, {0x0, 0x7, "89fd8b6676"}, {0x7, 0xe, "839c3a11f9172eb0964bb3c8"}]}, @timestamp_prespec={0x44, 0x14, 0x79, 0x3, 0x9, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@multicast2, 0x4}]}, @cipso={0x86, 0x18, 0x1, [{0x6, 0x8, "7bbf14ea4e70"}, {0x7, 0x6, "124b29f2"}, {0x7, 0x4, "982a"}]}, @timestamp_addr={0x44, 0xc, 0x8b, 0x1, 0xe, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}]}]}}}}}) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000c80)={0x124, 0x0, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x94, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x44000}, 0x40) [ 637.344365][ T27] audit: type=1800 audit(1664078834.783:360): pid=12026 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=".pending_reads" dev="sda1" ino=1178 res=0 errno=0 04:07:14 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time_recursive\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0xfffffffffffffdda) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001400)={&(0x7f00000013c0)='ext4_lazy_itable_init\x00'}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r1, 0xff, 0x0, 0x0, 0x0) syncfs(r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r2, &(0x7f0000000000), 0x20b000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000200)='illinois\x00', 0x9) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000000)=0x2805, 0x4) r4 = openat(0xffffffffffffffff, &(0x7f00000002c0)='/proc/self/exe\x00', 0x0, 0x5) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000280)={0x0, &(0x7f00000001c0)}, 0x10) close(0xffffffffffffffff) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e20, @loopback}, 0x10) sendfile(r3, r4, 0x0, 0x90000) recvmsg(r3, &(0x7f0000000580)={0x0, 0x41, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4084, 0xfffffe1f}], 0x6, 0x0, 0xfffffffffffffcc9}, 0x700) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time_recursive\x00', 0x26e1, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0xfffffffffffffdda) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001400)={&(0x7f00000013c0)='ext4_lazy_itable_init\x00'}, 0x10) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) getsockopt(r1, 0xff, 0x0, 0x0, 0x0) (async) syncfs(r1) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async) write$cgroup_type(r2, &(0x7f0000000000), 0x20b000) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000200)='illinois\x00', 0x9) (async) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10) (async) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000000)=0x2805, 0x4) (async) openat(0xffffffffffffffff, &(0x7f00000002c0)='/proc/self/exe\x00', 0x0, 0x5) (async) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000280)={0x0, &(0x7f00000001c0)}, 0x10) (async) close(0xffffffffffffffff) (async) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e20, @loopback}, 0x10) (async) sendfile(r3, r4, 0x0, 0x90000) (async) recvmsg(r3, &(0x7f0000000580)={0x0, 0x41, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4084, 0xfffffe1f}], 0x6, 0x0, 0xfffffffffffffcc9}, 0x700) (async) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, 0x0) (async) 04:07:14 executing program 2: syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x65}, @l2cap_cid_signaling={{0x61}, [@l2cap_move_chan_req={{0xe, 0x3, 0x3}, {0x100, 0x6}}, @l2cap_conf_req={{0x4, 0x6d, 0x24}, {0x20, 0x8, [@l2cap_conf_rfc={0x4, 0x9, {0x2, 0x2, 0x2, 0x1f, 0x2, 0x7f}}, @l2cap_conf_efs={0x6, 0x10, {0x3, 0x1, 0xd4, 0x8, 0x101, 0xbd2}}, @l2cap_conf_fcs={0x5, 0x1, 0x1}]}}, @l2cap_move_chan_cfm={{0x10, 0x80, 0x4}, {0x0, 0x3}}, @l2cap_conn_req={{0x2, 0x3f, 0x4}, {0x2e2e, 0x8}}, @l2cap_conf_rsp={{0x5, 0x30, 0x18}, {0x401, 0x7, 0x1ff, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_mtu={0x1, 0x2, 0x4}, @l2cap_conf_mtu={0x1, 0x2, 0x38}, @l2cap_conf_flushto={0x2, 0x2, 0x24}]}}, @l2cap_cmd_rej_unk={{0x1, 0x5, 0x2}, {0x8}}]}}, 0x6a) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x20, 0x4}, {0xfffd, 0x3ff}}}}, 0x11) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000280)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x0, 0x18}, @l2cap_cid_le_signaling={{0x14}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x10}, {0x40e, 0x80, 0x2, 0x9, [0x800, 0x9d, 0x80, 0x1a0]}}}}, 0x1d) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xa}, @hci_ev_le_conn_update_complete={{}, {0x0, 0xc9, 0x3ff, 0x1ff, 0x946}}}}, 0xd) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_hardware_error={{0x10, 0x1}, {0x3f}}}, 0x4) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="04400208c8cb86556d817eace2413fd6ee9a0accdf4f9bf0925092bfc729a4b05bb06b138eb89020c7ad0a5bc3daed812f962406b8d1e36e555eb3875ca313c9f789a3862409ba1f2beffc062219e56337f688ce33e1cde318b8ae85b126544a9f0d2a69cbd33f4a7f7f7da7884552b707a3ad3a1170a690650dbef31debf8b890f9d21053819fe042340af31dfd05757666abcb152b47bfdb7c47acf2ea89552adfe5194648c88ea1fdd0f2c906178f2e149835c82a0bcc0de60102780a5666ba5da3a5d12e94f8a712b48805d4613bf1997e"], 0x5) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x9, @none, "edd04dc68448fae00cfed9ac5e1e401619daac6995cdcda91f0cc4fb41ac046667caafb82d750de926ae6f9e40e91d852e830261abfc816dc041371a98b544dbd2a56d8731a5eab320d2ea3796def55352fbcad4d5f946615df54e37f41b87e432ac3936c0004c569ee1ed6620c929b8d2d4a908f28bb2bc2789d2847f1259d7e0b394f8d866b97c2eedc790ad501889d1c0001a86fd9cd4ebd2f7df32809c3599dfeff7be32b8059e9f1fe84c4f2ec0dfd4f86bd4f941cdf332e7df87783ac6f6c6db69770c5e5acb8ac8c7e002cf95f1419263cddb9d3e8574a484091edb7842304e0b369d75bf7eba4986e0099f65f48d1a909a656da7"}}}, 0x102) syz_emit_vhci(&(0x7f0000000400)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xa0}, "7a30856559ef16866effa125e3a70d9abb665725530e6fc45bbb7e7cb01575e872ff7b2f38e03144f2b06f0f5ffafa98f730ceee87af10baaaa866fe9d3bf7144ab99327069fbf11415eb2fe43bedf32a6ff62dff3160fc51e35f2df94ce9ec71657cdb2d1c7c5423a6127597cfb00baf8667c82d4c17655ddf227c1ab1239ee854d5631c71e6a8eebcdd1ad7d75122218124e2ca3d417ef11b1ebd6ac4bf590"}, 0xa4) syz_emit_vhci(&(0x7f0000000500)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x5b}, {0x6, [{@none, 0x6, 0x20, 0x6, "b28197", 0x7, 0x6}, {@none, 0x81, 0xcd, 0x1, "9e9612", 0x7fff, 0x1}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x48, 0x2, "1089e2", 0x0, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x4, 0x0, 0x5, 'p]R', 0x7f, 0x32}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x72, 0x0, "051ab1", 0x9, 0x5}, {@none, 0x1, 0x80, 0x61, "64a2a4", 0xf000, 0x1}]}}}, 0x5e) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_rsp={{0x15, 0xdc, 0xa}, {0x0, 0x100, 0x8, 0x1000, 0xffff}}}}, 0x17) 04:07:14 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x4c75, 0xfffffffffffffffd) [ 637.484174][ T27] audit: type=1800 audit(1664078834.923:361): pid=12038 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=".pending_reads" dev="sda1" ino=1181 res=0 errno=0 [ 637.507345][T12036] loop3: detected capacity change from 0 to 20 [ 637.510547][ T9814] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 637.572752][ T15] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 637.652811][ T3691] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 637.822861][ T15] usb 2-1: Using ep0 maxpacket: 16 [ 637.912768][ T3691] usb 5-1: Using ep0 maxpacket: 16 [ 637.943079][ T15] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 252, changing to 11 [ 637.954361][ T15] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 25152, setting to 1024 [ 638.042988][ T3691] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 638.122775][ T15] usb 2-1: New USB device found, idVendor=15c2, idProduct=0040, bcdDevice=80.f3 [ 638.131979][ T15] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 638.144683][ T15] usb 2-1: Product: syz [ 638.148844][ T15] usb 2-1: Manufacturer: syz [ 638.154970][ T15] usb 2-1: SerialNumber: syz [ 638.160877][ T15] usb 2-1: config 0 descriptor?? [ 638.205278][ T15] input: iMON Panel, Knob and Mouse(15c2:0040) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input229 [ 638.244052][ T3691] usb 5-1: New USB device found, idVendor=15c2, idProduct=0040, bcdDevice=80.f3 [ 638.253682][ T3691] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 638.261680][ T3691] usb 5-1: Product: syz [ 638.266125][ T3691] usb 5-1: Manufacturer: syz [ 638.270757][ T3691] usb 5-1: SerialNumber: syz [ 638.277258][ T3691] usb 5-1: config 0 descriptor?? [ 638.325723][ T3691] input: iMON Panel, Knob and Mouse(15c2:0040) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input231 [ 638.492765][ T15] rc_core: IR keymap rc-imon-pad not found [ 638.498719][ T15] Registered IR keymap rc-empty [ 638.504020][ T15] imon 2-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 638.514286][ T15] imon 2-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 638.612814][ T3691] rc_core: IR keymap rc-imon-pad not found [ 638.618787][ T3691] Registered IR keymap rc-empty [ 638.624327][ T3691] imon 5-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 638.634484][ T3691] imon 5-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 638.664554][ T15] rc rc0: iMON Remote (15c2:0040) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 638.676179][ T15] input: iMON Remote (15c2:0040) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input230 [ 638.690136][ T15] imon 2-1:0.0: iMON device (15c2:0040, intf0) on usb<2:80> initialized [ 638.762898][ T3691] imon:send_packet: packet tx failed (-71) [ 638.782794][ T3691] imon 5-1:0.0: remote input dev register failed [ 638.789436][ T3691] imon 5-1:0.0: imon_init_intf0: rc device setup failed [ 638.823196][ T3691] imon 5-1:0.0: unable to initialize intf0, err 0 [ 638.829799][ T3691] imon:imon_probe: failed to initialize context! [ 638.836749][ T3691] imon 5-1:0.0: unable to register, err -19 [ 638.846494][T12015] imon:vfd_write: invalid payload size [ 638.853805][ T3691] usb 5-1: USB disconnect, device number 64 [ 638.869320][ T23] usb 2-1: USB disconnect, device number 80 [ 638.872734][ C0] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored 04:07:16 executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000007c0)=ANY=[@ANYBLOB="1201000079201010c2154000f3800102030109021b0001000000000904000001e104550009058b0b40"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) 04:07:16 executing program 3: symlinkat(&(0x7f0000002940)='./file0\x00', 0xffffffffffffffff, &(0x7f0000001900)='./file1\x00') r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x4040, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r0, 0xc0185879, &(0x7f0000000040)={@id={0x2, 0x0, @auto="001006040000000f00000400"}}) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x4040, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r1, 0xc0185879, &(0x7f0000000040)={@id={0x2, 0x0, @auto="001006040000000f00000400"}}) r2 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x4040, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r2, 0xc0185879, &(0x7f0000000040)={@id={0x2, 0x0, @auto="001006040000000f00000400"}}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000180)) 04:07:16 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time_recursive\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001400)={&(0x7f00000013c0)='ext4_es_find_extent_range_enter\x00'}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r1, 0xff, 0x0, 0x0, 0x0) syncfs(r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r2, &(0x7f0000000000), 0x20b000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000200)='illinois\x00', 0x9) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x6, &(0x7f00000000c0)=0xfffffff9, 0x4) r4 = openat(0xffffffffffffffff, &(0x7f0000000300)='/proc/self/exe\x00', 0x8a0, 0x55) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000280)={0x0, &(0x7f00000001c0)}, 0x10) close(0xffffffffffffffff) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e20, @loopback}, 0x10) sendfile(r3, r4, 0x0, 0x90000) recvmsg(r3, &(0x7f0000000580)={0x0, 0x41, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4084, 0xfffffe1f}], 0x6, 0x0, 0xfffffffffffffcc9}, 0x700) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, 0x0) 04:07:16 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x4c76, 0xfffffffffffffffd) 04:07:16 executing program 2: syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x65}, @l2cap_cid_signaling={{0x61}, [@l2cap_move_chan_req={{0xe, 0x3, 0x3}, {0x100, 0x6}}, @l2cap_conf_req={{0x4, 0x6d, 0x24}, {0x20, 0x8, [@l2cap_conf_rfc={0x4, 0x9, {0x2, 0x2, 0x2, 0x1f, 0x2, 0x7f}}, @l2cap_conf_efs={0x6, 0x10, {0x3, 0x1, 0xd4, 0x8, 0x101, 0xbd2}}, @l2cap_conf_fcs={0x5, 0x1, 0x1}]}}, @l2cap_move_chan_cfm={{0x10, 0x80, 0x4}, {0x0, 0x3}}, @l2cap_conn_req={{0x2, 0x3f, 0x4}, {0x2e2e, 0x8}}, @l2cap_conf_rsp={{0x5, 0x30, 0x18}, {0x401, 0x7, 0x1ff, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_mtu={0x1, 0x2, 0x4}, @l2cap_conf_mtu={0x1, 0x2, 0x38}, @l2cap_conf_flushto={0x2, 0x2, 0x24}]}}, @l2cap_cmd_rej_unk={{0x1, 0x5, 0x2}, {0x8}}]}}, 0x6a) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x20, 0x4}, {0xfffd, 0x3ff}}}}, 0x11) (async) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000280)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x0, 0x18}, @l2cap_cid_le_signaling={{0x14}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x10}, {0x40e, 0x80, 0x2, 0x9, [0x800, 0x9d, 0x80, 0x1a0]}}}}, 0x1d) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xa}, @hci_ev_le_conn_update_complete={{}, {0x0, 0xc9, 0x3ff, 0x1ff, 0x946}}}}, 0xd) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_hardware_error={{0x10, 0x1}, {0x3f}}}, 0x4) (async, rerun: 64) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="04400208c8cb86556d817eace2413fd6ee9a0accdf4f9bf0925092bfc729a4b05bb06b138eb89020c7ad0a5bc3daed812f962406b8d1e36e555eb3875ca313c9f789a3862409ba1f2beffc062219e56337f688ce33e1cde318b8ae85b126544a9f0d2a69cbd33f4a7f7f7da7884552b707a3ad3a1170a690650dbef31debf8b890f9d21053819fe042340af31dfd05757666abcb152b47bfdb7c47acf2ea89552adfe5194648c88ea1fdd0f2c906178f2e149835c82a0bcc0de60102780a5666ba5da3a5d12e94f8a712b48805d4613bf1997e"], 0x5) (rerun: 64) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x9, @none, "edd04dc68448fae00cfed9ac5e1e401619daac6995cdcda91f0cc4fb41ac046667caafb82d750de926ae6f9e40e91d852e830261abfc816dc041371a98b544dbd2a56d8731a5eab320d2ea3796def55352fbcad4d5f946615df54e37f41b87e432ac3936c0004c569ee1ed6620c929b8d2d4a908f28bb2bc2789d2847f1259d7e0b394f8d866b97c2eedc790ad501889d1c0001a86fd9cd4ebd2f7df32809c3599dfeff7be32b8059e9f1fe84c4f2ec0dfd4f86bd4f941cdf332e7df87783ac6f6c6db69770c5e5acb8ac8c7e002cf95f1419263cddb9d3e8574a484091edb7842304e0b369d75bf7eba4986e0099f65f48d1a909a656da7"}}}, 0x102) (async) syz_emit_vhci(&(0x7f0000000400)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xa0}, "7a30856559ef16866effa125e3a70d9abb665725530e6fc45bbb7e7cb01575e872ff7b2f38e03144f2b06f0f5ffafa98f730ceee87af10baaaa866fe9d3bf7144ab99327069fbf11415eb2fe43bedf32a6ff62dff3160fc51e35f2df94ce9ec71657cdb2d1c7c5423a6127597cfb00baf8667c82d4c17655ddf227c1ab1239ee854d5631c71e6a8eebcdd1ad7d75122218124e2ca3d417ef11b1ebd6ac4bf590"}, 0xa4) (async) syz_emit_vhci(&(0x7f0000000500)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x5b}, {0x6, [{@none, 0x6, 0x20, 0x6, "b28197", 0x7, 0x6}, {@none, 0x81, 0xcd, 0x1, "9e9612", 0x7fff, 0x1}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x48, 0x2, "1089e2", 0x0, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x4, 0x0, 0x5, 'p]R', 0x7f, 0x32}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x72, 0x0, "051ab1", 0x9, 0x5}, {@none, 0x1, 0x80, 0x61, "64a2a4", 0xf000, 0x1}]}}}, 0x5e) (async, rerun: 32) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_rsp={{0x15, 0xdc, 0xa}, {0x0, 0x100, 0x8, 0x1000, 0xffff}}}}, 0x17) (rerun: 32) [ 639.292193][ T27] audit: type=1800 audit(1664078836.723:362): pid=12053 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=".pending_reads" dev="sda1" ino=1178 res=0 errno=0 04:07:16 executing program 1: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000079201010c2154000f3800102030109021b0001000000000904000001e104550009058b0b406afc2833edca3da816a846ce3dc489105552932645d17503695c2f64e977bc7d991fa91d6b7e88793463c269e2dc185d805b07f98295a3cb3990813b8da594771e6352b5a238a549d58bcec0b246b5ad9f6e42add931dcf919ceaa1157b57c113b1401b6589ae236f5bc1ea8ef3078155e48ef1e323432969c8a8006ccbb9864ed3fdd602374439352a294a617b138b3aebcc435f30274f872e865dfe4630d4a25bdd0c1b523421a4bd01330e5914ab40c27363e2488be620a5ac643193b508940b6f8ed4669c1d97ba16631d1e9cd1598142ce0f98db4cedb1ae00097ce3cd8968198d82b1a03731f44aff57652914d2a26c22a960f967c2c2ef399119e9cddea0ca9cbe858b87278c85a2926a214a83633300d0b2213073a728eac4fcc47755f8a5d1ba4474df643386c110d6a7b27e971c70c0ca526db74e5bedebd9584465610b9d5cdc529181b6b56797e2402498324e8afa5800c42db8058bb2fd688ce9689b9090cc8fa0703b8ef31ccb60181e90767366fa5d98c45d22c8d67420592"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) 04:07:16 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x4c77, 0xfffffffffffffffd) 04:07:16 executing program 3: symlinkat(&(0x7f0000002940)='./file0\x00', 0xffffffffffffffff, &(0x7f0000001900)='./file1\x00') r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x4040, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r0, 0xc0185879, &(0x7f0000000040)={@id={0x2, 0x0, @auto="001006040000000f00000400"}}) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x4040, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r1, 0xc0185879, &(0x7f0000000040)={@id={0x2, 0x0, @auto="001006040000000f00000400"}}) r2 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x4040, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r2, 0xc0185879, &(0x7f0000000040)={@id={0x2, 0x0, @auto="001006040000000f00000400"}}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000180)) symlinkat(&(0x7f0000002940)='./file0\x00', 0xffffffffffffffff, &(0x7f0000001900)='./file1\x00') (async) openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x4040, 0x0) (async) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r0, 0xc0185879, &(0x7f0000000040)={@id={0x2, 0x0, @auto="001006040000000f00000400"}}) (async) openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x4040, 0x0) (async) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r1, 0xc0185879, &(0x7f0000000040)={@id={0x2, 0x0, @auto="001006040000000f00000400"}}) (async) openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x4040, 0x0) (async) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r2, 0xc0185879, &(0x7f0000000040)={@id={0x2, 0x0, @auto="001006040000000f00000400"}}) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000180)) (async) 04:07:16 executing program 2: syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x65}, @l2cap_cid_signaling={{0x61}, [@l2cap_move_chan_req={{0xe, 0x3, 0x3}, {0x100, 0x6}}, @l2cap_conf_req={{0x4, 0x6d, 0x24}, {0x20, 0x8, [@l2cap_conf_rfc={0x4, 0x9, {0x2, 0x2, 0x2, 0x1f, 0x2, 0x7f}}, @l2cap_conf_efs={0x6, 0x10, {0x3, 0x1, 0xd4, 0x8, 0x101, 0xbd2}}, @l2cap_conf_fcs={0x5, 0x1, 0x1}]}}, @l2cap_move_chan_cfm={{0x10, 0x80, 0x4}, {0x0, 0x3}}, @l2cap_conn_req={{0x2, 0x3f, 0x4}, {0x2e2e, 0x8}}, @l2cap_conf_rsp={{0x5, 0x30, 0x18}, {0x401, 0x7, 0x1ff, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_mtu={0x1, 0x2, 0x4}, @l2cap_conf_mtu={0x1, 0x2, 0x38}, @l2cap_conf_flushto={0x2, 0x2, 0x24}]}}, @l2cap_cmd_rej_unk={{0x1, 0x5, 0x2}, {0x8}}]}}, 0x6a) (async) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x20, 0x4}, {0xfffd, 0x3ff}}}}, 0x11) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000280)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x0, 0x18}, @l2cap_cid_le_signaling={{0x14}, @l2cap_ecred_conn_req={{0x17, 0xff, 0x10}, {0x40e, 0x80, 0x2, 0x9, [0x800, 0x9d, 0x80, 0x1a0]}}}}, 0x1d) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xa}, @hci_ev_le_conn_update_complete={{}, {0x0, 0xc9, 0x3ff, 0x1ff, 0x946}}}}, 0xd) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_hardware_error={{0x10, 0x1}, {0x3f}}}, 0x4) (async) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="04400208c8cb86556d817eace2413fd6ee9a0accdf4f9bf0925092bfc729a4b05bb06b138eb89020c7ad0a5bc3daed812f962406b8d1e36e555eb3875ca313c9f789a3862409ba1f2beffc062219e56337f688ce33e1cde318b8ae85b126544a9f0d2a69cbd33f4a7f7f7da7884552b707a3ad3a1170a690650dbef31debf8b890f9d21053819fe042340af31dfd05757666abcb152b47bfdb7c47acf2ea89552adfe5194648c88ea1fdd0f2c906178f2e149835c82a0bcc0de60102780a5666ba5da3a5d12e94f8a712b48805d4613bf1997e"], 0x5) (async) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x9, @none, "edd04dc68448fae00cfed9ac5e1e401619daac6995cdcda91f0cc4fb41ac046667caafb82d750de926ae6f9e40e91d852e830261abfc816dc041371a98b544dbd2a56d8731a5eab320d2ea3796def55352fbcad4d5f946615df54e37f41b87e432ac3936c0004c569ee1ed6620c929b8d2d4a908f28bb2bc2789d2847f1259d7e0b394f8d866b97c2eedc790ad501889d1c0001a86fd9cd4ebd2f7df32809c3599dfeff7be32b8059e9f1fe84c4f2ec0dfd4f86bd4f941cdf332e7df87783ac6f6c6db69770c5e5acb8ac8c7e002cf95f1419263cddb9d3e8574a484091edb7842304e0b369d75bf7eba4986e0099f65f48d1a909a656da7"}}}, 0x102) (async) syz_emit_vhci(&(0x7f0000000400)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xa0}, "7a30856559ef16866effa125e3a70d9abb665725530e6fc45bbb7e7cb01575e872ff7b2f38e03144f2b06f0f5ffafa98f730ceee87af10baaaa866fe9d3bf7144ab99327069fbf11415eb2fe43bedf32a6ff62dff3160fc51e35f2df94ce9ec71657cdb2d1c7c5423a6127597cfb00baf8667c82d4c17655ddf227c1ab1239ee854d5631c71e6a8eebcdd1ad7d75122218124e2ca3d417ef11b1ebd6ac4bf590"}, 0xa4) syz_emit_vhci(&(0x7f0000000500)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x5b}, {0x6, [{@none, 0x6, 0x20, 0x6, "b28197", 0x7, 0x6}, {@none, 0x81, 0xcd, 0x1, "9e9612", 0x7fff, 0x1}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x48, 0x2, "1089e2", 0x0, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x4, 0x0, 0x5, 'p]R', 0x7f, 0x32}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x72, 0x0, "051ab1", 0x9, 0x5}, {@none, 0x1, 0x80, 0x61, "64a2a4", 0xf000, 0x1}]}}}, 0x5e) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_rsp={{0x15, 0xdc, 0xa}, {0x0, 0x100, 0x8, 0x1000, 0xffff}}}}, 0x17) [ 639.347720][ T27] audit: type=1800 audit(1664078836.723:363): pid=12053 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=".pending_reads" dev="sda1" ino=1178 res=0 errno=0 [ 639.379106][ T27] audit: type=1800 audit(1664078836.723:364): pid=12053 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=".pending_reads" dev="sda1" ino=1178 res=0 errno=0 04:07:16 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x4c78, 0xfffffffffffffffd) 04:07:16 executing program 2: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x4040, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r0, 0xc0185879, &(0x7f0000000100)={@id={0x2, 0x0, @auto="001006040000000f00000400"}}) ioctl$int_in(r0, 0x5421, &(0x7f00000000c0)=0xffffffff) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYRESHEX=r0], 0x7) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000080)={r0}) fcntl$setpipe(r1, 0x407, 0x6) [ 639.419027][ T27] audit: type=1800 audit(1664078836.843:365): pid=12063 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=".pending_reads" dev="sda1" ino=1172 res=0 errno=0 04:07:16 executing program 3: symlinkat(&(0x7f0000002940)='./file0\x00', 0xffffffffffffffff, &(0x7f0000001900)='./file1\x00') r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x4040, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r0, 0xc0185879, &(0x7f0000000040)={@id={0x2, 0x0, @auto="001006040000000f00000400"}}) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x4040, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r1, 0xc0185879, &(0x7f0000000040)={@id={0x2, 0x0, @auto="001006040000000f00000400"}}) r2 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x4040, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r2, 0xc0185879, &(0x7f0000000040)={@id={0x2, 0x0, @auto="001006040000000f00000400"}}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000180)) symlinkat(&(0x7f0000002940)='./file0\x00', 0xffffffffffffffff, &(0x7f0000001900)='./file1\x00') (async) openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x4040, 0x0) (async) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r0, 0xc0185879, &(0x7f0000000040)={@id={0x2, 0x0, @auto="001006040000000f00000400"}}) (async) openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x4040, 0x0) (async) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r1, 0xc0185879, &(0x7f0000000040)={@id={0x2, 0x0, @auto="001006040000000f00000400"}}) (async) openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x4040, 0x0) (async) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r2, 0xc0185879, &(0x7f0000000040)={@id={0x2, 0x0, @auto="001006040000000f00000400"}}) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000180)) (async) [ 639.448025][ T27] audit: type=1800 audit(1664078836.843:366): pid=12063 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=".pending_reads" dev="sda1" ino=1172 res=0 errno=0 [ 639.478946][ T27] audit: type=1800 audit(1664078836.843:367): pid=12063 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=".pending_reads" dev="sda1" ino=1172 res=0 errno=0 [ 639.510227][ T27] audit: type=1800 audit(1664078836.883:368): pid=12072 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=".pending_reads" dev="sda1" ino=1172 res=0 errno=0 [ 639.622757][ T3692] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 639.742793][ T3779] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 639.862908][ T3692] usb 5-1: Using ep0 maxpacket: 16 [ 639.992890][ T3779] usb 2-1: Using ep0 maxpacket: 16 [ 640.013141][ T3692] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 640.122892][ T3779] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 252, changing to 11 [ 640.134374][ T3779] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 25152, setting to 1024 [ 640.193122][ T3692] usb 5-1: New USB device found, idVendor=15c2, idProduct=0040, bcdDevice=80.f3 [ 640.202242][ T3692] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 640.210543][ T3692] usb 5-1: Product: syz [ 640.214916][ T3692] usb 5-1: Manufacturer: syz [ 640.219602][ T3692] usb 5-1: SerialNumber: syz [ 640.228447][ T3692] usb 5-1: config 0 descriptor?? [ 640.274948][ T3692] input: iMON Panel, Knob and Mouse(15c2:0040) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input233 [ 640.333072][ T3779] usb 2-1: New USB device found, idVendor=15c2, idProduct=0040, bcdDevice=80.f3 [ 640.342508][ T3779] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 640.350721][ T3779] usb 2-1: Product: syz [ 640.356319][ T3779] usb 2-1: Manufacturer: syz [ 640.360920][ T3779] usb 2-1: SerialNumber: syz [ 640.367501][ T3779] usb 2-1: config 0 descriptor?? [ 640.415136][ T3779] input: iMON Panel, Knob and Mouse(15c2:0040) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input235 [ 640.570642][ T3692] rc_core: IR keymap rc-imon-pad not found [ 640.576592][ T3692] Registered IR keymap rc-empty [ 640.581481][ T3692] imon 5-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 640.591734][ T3692] imon 5-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 640.713293][ T3692] imon:send_packet: packet tx failed (-71) [ 640.733089][ T3779] rc_core: IR keymap rc-imon-pad not found [ 640.738974][ T3779] Registered IR keymap rc-empty [ 640.744004][ T3692] imon 5-1:0.0: remote input dev register failed [ 640.750858][ T3692] imon 5-1:0.0: imon_init_intf0: rc device setup failed [ 640.758060][ T3779] imon 2-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 640.768379][ T3779] imon 2-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 640.792919][ T3692] imon 5-1:0.0: unable to initialize intf0, err 0 [ 640.799445][ T3692] imon:imon_probe: failed to initialize context! [ 640.806222][ T3692] imon 5-1:0.0: unable to register, err -19 [ 640.821516][ T3692] usb 5-1: USB disconnect, device number 65 [ 640.863788][ T3779] rc rc1: iMON Remote (15c2:0040) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc1 [ 640.875620][ T3779] input: iMON Remote (15c2:0040) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc1/input236 [ 640.889851][ T3779] imon 2-1:0.0: iMON device (15c2:0040, intf0) on usb<2:81> initialized [ 641.046431][ T3692] usb 2-1: USB disconnect, device number 81 [ 641.052689][ C0] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored 04:07:18 executing program 2: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x4040, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r0, 0xc0185879, &(0x7f0000000100)={@id={0x2, 0x0, @auto="001006040000000f00000400"}}) ioctl$int_in(r0, 0x5421, &(0x7f00000000c0)=0xffffffff) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYRESHEX=r0], 0x7) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000080)={r0}) fcntl$setpipe(r1, 0x407, 0x6) openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x4040, 0x0) (async) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r0, 0xc0185879, &(0x7f0000000100)={@id={0x2, 0x0, @auto="001006040000000f00000400"}}) (async) ioctl$int_in(r0, 0x5421, &(0x7f00000000c0)=0xffffffff) (async) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYRESHEX=r0], 0x7) (async) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000080)={r0}) (async) fcntl$setpipe(r1, 0x407, 0x6) (async) 04:07:18 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x4c79, 0xfffffffffffffffd) 04:07:18 executing program 3: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f000064b000/0x3000)=nil, 0x3000, 0x65) r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x4040, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r0, 0xc0185879, &(0x7f0000000040)={@id={0x2, 0x0, @auto="001006040000000f00000400"}}) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x4040, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r1, 0xc0185879, &(0x7f0000000040)={@id={0x2, 0x0, @auto="001006040000000f00000400"}}) r2 = syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x1000000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="10000000000001000100050000000000ffffff7f200000005a4d", 0x1a, 0x400}, {&(0x7f0000000440)="ff00feffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff00ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff03f0ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffe1ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed41034844d6de4005", 0x809, 0x800}, {0x0, 0x0, 0x1400}], 0x100000, &(0x7f0000000100)=ANY=[@ANYRESHEX=r0, @ANYRES32=r1], 0x0) symlinkat(&(0x7f0000002940)='./file0\x00', r2, &(0x7f0000001900)='./file1\x00') r3 = memfd_secret(0x0) r4 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x4040, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r4, 0xc0185879, &(0x7f0000000040)={@id={0x2, 0x0, @auto="001006040000000f00000400"}}) ioctl$FICLONERANGE(r2, 0x4020940d, &(0x7f00000000c0)={{r4}, 0x7fffffffffffffff, 0x0, 0x1}) renameat2(r3, &(0x7f0000000000)='./file0\x00', r2, &(0x7f0000000080)='./file2\x00', 0x1) 04:07:18 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time_recursive\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001400)={&(0x7f00000013c0)='ext4_es_find_extent_range_enter\x00'}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r1, 0xff, 0x0, 0x0, 0x0) syncfs(r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r2, &(0x7f0000000000), 0x20b000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000200)='illinois\x00', 0x9) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x6, &(0x7f00000000c0)=0xfffffff9, 0x4) r4 = openat(0xffffffffffffffff, &(0x7f0000000300)='/proc/self/exe\x00', 0x8a0, 0x55) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000280)={0x0, &(0x7f00000001c0)}, 0x10) close(0xffffffffffffffff) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e20, @loopback}, 0x10) sendfile(r3, r4, 0x0, 0x90000) recvmsg(r3, &(0x7f0000000580)={0x0, 0x41, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4084, 0xfffffe1f}], 0x6, 0x0, 0xfffffffffffffcc9}, 0x700) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time_recursive\x00', 0x26e1, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001400)={&(0x7f00000013c0)='ext4_es_find_extent_range_enter\x00'}, 0x10) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) getsockopt(r1, 0xff, 0x0, 0x0, 0x0) (async) syncfs(r1) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async) write$cgroup_type(r2, &(0x7f0000000000), 0x20b000) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000200)='illinois\x00', 0x9) (async) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10) (async) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x6, &(0x7f00000000c0)=0xfffffff9, 0x4) (async) openat(0xffffffffffffffff, &(0x7f0000000300)='/proc/self/exe\x00', 0x8a0, 0x55) (async) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000280)={0x0, &(0x7f00000001c0)}, 0x10) (async) close(0xffffffffffffffff) (async) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e20, @loopback}, 0x10) (async) sendfile(r3, r4, 0x0, 0x90000) (async) recvmsg(r3, &(0x7f0000000580)={0x0, 0x41, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4084, 0xfffffe1f}], 0x6, 0x0, 0xfffffffffffffcc9}, 0x700) (async) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, 0x0) (async) 04:07:18 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x4c7a, 0xfffffffffffffffd) [ 641.218515][ T27] kauditd_printk_skb: 5 callbacks suppressed [ 641.218541][ T27] audit: type=1800 audit(1664078838.653:374): pid=12099 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name=".pending_reads" dev="sda1" ino=1172 res=0 errno=0 [ 641.315807][ T27] audit: type=1800 audit(1664078838.703:375): pid=12099 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name=".pending_reads" dev="sda1" ino=1172 res=0 errno=0 04:07:19 executing program 1: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000079201010c2154000f3800102030109021b0001000000000904000001e104550009058b0b406afc2833edca3da816a846ce3dc489105552932645d17503695c2f64e977bc7d991fa91d6b7e88793463c269e2dc185d805b07f98295a3cb3990813b8da594771e6352b5a238a549d58bcec0b246b5ad9f6e42add931dcf919ceaa1157b57c113b1401b6589ae236f5bc1ea8ef3078155e48ef1e323432969c8a8006ccbb9864ed3fdd602374439352a294a617b138b3aebcc435f30274f872e865dfe4630d4a25bdd0c1b523421a4bd01330e5914ab40c27363e2488be620a5ac643193b508940b6f8ed4669c1d97ba16631d1e9cd1598142ce0f98db4cedb1ae00097ce3cd8968198d82b1a03731f44aff57652914d2a26c22a960f967c2c2ef399119e9cddea0ca9cbe858b87278c85a2926a214a83633300d0b2213073a728eac4fcc47755f8a5d1ba4474df643386c110d6a7b27e971c70c0ca526db74e5bedebd9584465610b9d5cdc529181b6b56797e2402498324e8afa5800c42db8058bb2fd688ce9689b9090cc8fa0703b8ef31ccb60181e90767366fa5d98c45d22c8d67420592"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000079201010c2154000f3800102030109021b0001000000000904000001e104550009058b0b406afc2833edca3da816a846ce3dc489105552932645d17503695c2f64e977bc7d991fa91d6b7e88793463c269e2dc185d805b07f98295a3cb3990813b8da594771e6352b5a238a549d58bcec0b246b5ad9f6e42add931dcf919ceaa1157b57c113b1401b6589ae236f5bc1ea8ef3078155e48ef1e323432969c8a8006ccbb9864ed3fdd602374439352a294a617b138b3aebcc435f30274f872e865dfe4630d4a25bdd0c1b523421a4bd01330e5914ab40c27363e2488be620a5ac643193b508940b6f8ed4669c1d97ba16631d1e9cd1598142ce0f98db4cedb1ae00097ce3cd8968198d82b1a03731f44aff57652914d2a26c22a960f967c2c2ef399119e9cddea0ca9cbe858b87278c85a2926a214a83633300d0b2213073a728eac4fcc47755f8a5d1ba4474df643386c110d6a7b27e971c70c0ca526db74e5bedebd9584465610b9d5cdc529181b6b56797e2402498324e8afa5800c42db8058bb2fd688ce9689b9090cc8fa0703b8ef31ccb60181e90767366fa5d98c45d22c8d67420592"], 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) write$char_usb(r1, 0x0, 0x0) (async) 04:07:19 executing program 4: r0 = syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="10000000000001000100050000000000ffffff7f200000005a4d", 0x1a, 0x400}, {&(0x7f0000000c80)="ff00feffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff00ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff03f0ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffe1ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed41034844d6de4005", 0x809, 0x800}, {0x0, 0x0, 0x1400}], 0x0, &(0x7f0000000080)=ANY=[@ANYRESDEC=0x0, @ANYRES8=0x0], 0x0) symlinkat(&(0x7f0000002940)='./file0\x00', r0, &(0x7f0000001900)='./file1\x00') renameat(r0, &(0x7f0000000100)='./file0\x00', r0, &(0x7f0000000180)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0xc2) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) ioctl$SCSI_IOCTL_DOORLOCK(r1, 0x5380) 04:07:19 executing program 2: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x4040, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r0, 0xc0185879, &(0x7f0000000100)={@id={0x2, 0x0, @auto="001006040000000f00000400"}}) ioctl$int_in(r0, 0x5421, &(0x7f00000000c0)=0xffffffff) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYRESHEX=r0], 0x7) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000080)={r0}) fcntl$setpipe(r1, 0x407, 0x6) openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x4040, 0x0) (async) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r0, 0xc0185879, &(0x7f0000000100)={@id={0x2, 0x0, @auto="001006040000000f00000400"}}) (async) ioctl$int_in(r0, 0x5421, &(0x7f00000000c0)=0xffffffff) (async) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYRESHEX=r0], 0x7) (async) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000080)={r0}) (async) fcntl$setpipe(r1, 0x407, 0x6) (async) 04:07:19 executing program 3: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f000064b000/0x3000)=nil, 0x3000, 0x65) r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x4040, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r0, 0xc0185879, &(0x7f0000000040)={@id={0x2, 0x0, @auto="001006040000000f00000400"}}) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x4040, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r1, 0xc0185879, &(0x7f0000000040)={@id={0x2, 0x0, @auto="001006040000000f00000400"}}) r2 = syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x1000000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="10000000000001000100050000000000ffffff7f200000005a4d", 0x1a, 0x400}, {&(0x7f0000000440)="ff00feffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff00ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff03f0ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffe1ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed41034844d6de4005", 0x809, 0x800}, {0x0, 0x0, 0x1400}], 0x100000, &(0x7f0000000100)=ANY=[@ANYRESHEX=r0, @ANYRES32=r1], 0x0) symlinkat(&(0x7f0000002940)='./file0\x00', r2, &(0x7f0000001900)='./file1\x00') r3 = memfd_secret(0x0) r4 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x4040, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r4, 0xc0185879, &(0x7f0000000040)={@id={0x2, 0x0, @auto="001006040000000f00000400"}}) ioctl$FICLONERANGE(r2, 0x4020940d, &(0x7f00000000c0)={{r4}, 0x7fffffffffffffff, 0x0, 0x1}) renameat2(r3, &(0x7f0000000000)='./file0\x00', r2, &(0x7f0000000080)='./file2\x00', 0x1) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c831, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f000064b000/0x3000)=nil, 0x3000, 0x65) (async) openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x4040, 0x0) (async) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r0, 0xc0185879, &(0x7f0000000040)={@id={0x2, 0x0, @auto="001006040000000f00000400"}}) (async) openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x4040, 0x0) (async) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r1, 0xc0185879, &(0x7f0000000040)={@id={0x2, 0x0, @auto="001006040000000f00000400"}}) (async) syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x1000000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="10000000000001000100050000000000ffffff7f200000005a4d", 0x1a, 0x400}, {&(0x7f0000000440)="ff00feffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff00ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff03f0ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffe1ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed41034844d6de4005", 0x809, 0x800}, {0x0, 0x0, 0x1400}], 0x100000, &(0x7f0000000100)=ANY=[@ANYRESHEX=r0, @ANYRES32=r1], 0x0) (async) symlinkat(&(0x7f0000002940)='./file0\x00', r2, &(0x7f0000001900)='./file1\x00') (async) memfd_secret(0x0) (async) openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x4040, 0x0) (async) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r4, 0xc0185879, &(0x7f0000000040)={@id={0x2, 0x0, @auto="001006040000000f00000400"}}) (async) ioctl$FICLONERANGE(r2, 0x4020940d, &(0x7f00000000c0)={{r4}, 0x7fffffffffffffff, 0x0, 0x1}) (async) renameat2(r3, &(0x7f0000000000)='./file0\x00', r2, &(0x7f0000000080)='./file2\x00', 0x1) (async) 04:07:19 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x4c7b, 0xfffffffffffffffd) 04:07:19 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time_recursive\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001400)={&(0x7f00000013c0)='ext4_es_find_extent_range_enter\x00'}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r1, 0xff, 0x0, 0x0, 0x0) syncfs(r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r2, &(0x7f0000000000), 0x20b000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000200)='illinois\x00', 0x9) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x6, &(0x7f00000000c0)=0xfffffff9, 0x4) r4 = openat(0xffffffffffffffff, &(0x7f0000000300)='/proc/self/exe\x00', 0x8a0, 0x55) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000280)={0x0, &(0x7f00000001c0)}, 0x10) close(0xffffffffffffffff) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e20, @loopback}, 0x10) sendfile(r3, r4, 0x0, 0x90000) recvmsg(r3, &(0x7f0000000580)={0x0, 0x41, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4084, 0xfffffe1f}], 0x6, 0x0, 0xfffffffffffffcc9}, 0x700) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time_recursive\x00', 0x26e1, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001400)={&(0x7f00000013c0)='ext4_es_find_extent_range_enter\x00'}, 0x10) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) getsockopt(r1, 0xff, 0x0, 0x0, 0x0) (async) syncfs(r1) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async) write$cgroup_type(r2, &(0x7f0000000000), 0x20b000) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000200)='illinois\x00', 0x9) (async) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10) (async) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x6, &(0x7f00000000c0)=0xfffffff9, 0x4) (async) openat(0xffffffffffffffff, &(0x7f0000000300)='/proc/self/exe\x00', 0x8a0, 0x55) (async) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000280)={0x0, &(0x7f00000001c0)}, 0x10) (async) close(0xffffffffffffffff) (async) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e20, @loopback}, 0x10) (async) sendfile(r3, r4, 0x0, 0x90000) (async) recvmsg(r3, &(0x7f0000000580)={0x0, 0x41, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4084, 0xfffffe1f}], 0x6, 0x0, 0xfffffffffffffcc9}, 0x700) (async) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, 0x0) (async) 04:07:19 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) readv(r1, &(0x7f0000000100)=[{&(0x7f0000000440)=""/4096, 0x1000}], 0x8) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f0000000280)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_USER_CONFIRM_NEG_REPLY}}, 0x7) [ 641.577657][ T27] audit: type=1800 audit(1664078839.013:376): pid=12118 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name=".pending_reads" dev="sda1" ino=1164 res=0 errno=0 [ 641.586067][T12122] loop4: detected capacity change from 0 to 20 04:07:19 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x4c7c, 0xfffffffffffffffd) 04:07:19 executing program 3: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c831, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f000064b000/0x3000)=nil, 0x3000, 0x65) r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x4040, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r0, 0xc0185879, &(0x7f0000000040)={@id={0x2, 0x0, @auto="001006040000000f00000400"}}) (async) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x4040, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r1, 0xc0185879, &(0x7f0000000040)={@id={0x2, 0x0, @auto="001006040000000f00000400"}}) (async, rerun: 32) r2 = syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x1000000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="10000000000001000100050000000000ffffff7f200000005a4d", 0x1a, 0x400}, {&(0x7f0000000440)="ff00feffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff00ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff03f0ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffe1ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed41034844d6de4005", 0x809, 0x800}, {0x0, 0x0, 0x1400}], 0x100000, &(0x7f0000000100)=ANY=[@ANYRESHEX=r0, @ANYRES32=r1], 0x0) (rerun: 32) symlinkat(&(0x7f0000002940)='./file0\x00', r2, &(0x7f0000001900)='./file1\x00') r3 = memfd_secret(0x0) (async) r4 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x4040, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r4, 0xc0185879, &(0x7f0000000040)={@id={0x2, 0x0, @auto="001006040000000f00000400"}}) (async) ioctl$FICLONERANGE(r2, 0x4020940d, &(0x7f00000000c0)={{r4}, 0x7fffffffffffffff, 0x0, 0x1}) (async) renameat2(r3, &(0x7f0000000000)='./file0\x00', r2, &(0x7f0000000080)='./file2\x00', 0x1) 04:07:19 executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000007c0)=ANY=[@ANYBLOB="1201000079201010c2154000f3800102030109021b0001000000000904000001e104550009058b0b40"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x7a00000000000000) [ 641.682676][ T27] audit: type=1800 audit(1664078839.053:377): pid=12118 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name=".pending_reads" dev="sda1" ino=1164 res=0 errno=0 04:07:19 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x4c7d, 0xfffffffffffffffd) [ 641.750601][ T12] kworker/u4:1: attempt to access beyond end of device [ 641.750601][ T12] loop4: rw=1, sector=44, nr_sectors = 2 limit=20 04:07:19 executing program 3: r0 = syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="10000000000001000100050000000000ffffff7f200000005a4d", 0x1a, 0x400}, {&(0x7f0000000440)="ff00feffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff00ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff03f0ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffe1ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed41034844d6de4005", 0x809, 0x800}, {0x0, 0x0, 0xa22}], 0x0, &(0x7f0000000500)=ANY=[], 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x10000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8}]}}}]}, 0x3c}}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r2, 0x0, r4, 0x0, 0x4ffe2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000280)) symlinkat(&(0x7f0000002940)='./file0\x00', r0, &(0x7f0000001900)='./file1\x00') r5 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x4040, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r5, 0xc0185879, &(0x7f0000000040)={@id={0x2, 0x0, @auto="001006040000000f00000400"}}) utime(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)={0x1, 0x8000}) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x1, 0x10}, &(0x7f00000000c0)=0xc) mknodat$null(r0, &(0x7f0000000000)='./file1/file0\x00', 0x4, 0x103) openat$full(0xffffffffffffff9c, &(0x7f00000002c0), 0x10040, 0x0) [ 641.832968][ T12] Buffer I/O error on dev loop4, logical block 22, lost async page write [ 641.841743][ T12] kworker/u4:1: attempt to access beyond end of device [ 641.841743][ T12] loop4: rw=1, sector=46, nr_sectors = 2 limit=20 [ 641.847113][T12163] loop3: detected capacity change from 0 to 10 [ 641.887831][ T12] Buffer I/O error on dev loop4, logical block 23, lost async page write [ 641.923783][ T3691] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 641.960679][T12166] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 641.974741][T12166] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 642.011392][ T27] audit: type=1800 audit(1664078839.443:378): pid=12166 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=".pending_reads" dev="sda1" ino=1166 res=0 errno=0 [ 642.202715][ T3691] usb 2-1: Using ep0 maxpacket: 16 [ 642.252881][ T3779] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 642.323027][ T3691] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 252, changing to 11 [ 642.338452][ T3691] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 25152, setting to 1024 [ 642.502796][ T3691] usb 2-1: New USB device found, idVendor=15c2, idProduct=0040, bcdDevice=80.f3 [ 642.511937][ T3691] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 642.522714][ T3779] usb 5-1: Using ep0 maxpacket: 16 [ 642.525020][ T3691] usb 2-1: Product: syz [ 642.532011][ T3691] usb 2-1: Manufacturer: syz [ 642.537065][ T3691] usb 2-1: SerialNumber: syz [ 642.551044][ T3691] usb 2-1: config 0 descriptor?? [ 642.608873][ T3691] input: iMON Panel, Knob and Mouse(15c2:0040) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input237 [ 642.643024][ T3779] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 642.688425][ T2432] kworker/u4:5: attempt to access beyond end of device [ 642.688425][ T2432] loop3: rw=1, sector=44, nr_sectors = 2 limit=10 [ 642.702223][ T2432] Buffer I/O error on dev loop3, logical block 22, lost async page write [ 642.711482][ T2432] kworker/u4:5: attempt to access beyond end of device [ 642.711482][ T2432] loop3: rw=1, sector=46, nr_sectors = 2 limit=10 [ 642.725578][ T2432] Buffer I/O error on dev loop3, logical block 23, lost async page write [ 642.832918][ T3779] usb 5-1: New USB device found, idVendor=15c2, idProduct=0040, bcdDevice=80.f3 [ 642.842032][ T3779] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 642.850370][ T3779] usb 5-1: Product: syz [ 642.854835][ T3779] usb 5-1: Manufacturer: syz [ 642.859634][ T3779] usb 5-1: SerialNumber: syz [ 642.866382][ T3779] usb 5-1: config 0 descriptor?? [ 642.883024][ T3691] rc_core: IR keymap rc-imon-pad not found [ 642.888913][ T3691] Registered IR keymap rc-empty [ 642.894324][ T3691] imon 2-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 642.904661][ T3691] imon 2-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 642.915284][ T3779] input: iMON Panel, Knob and Mouse(15c2:0040) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input239 [ 643.043659][ T3691] rc rc0: iMON Remote (15c2:0040) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 643.061273][ T3691] input: iMON Remote (15c2:0040) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input238 [ 643.079148][ T3691] imon 2-1:0.0: iMON device (15c2:0040, intf0) on usb<2:82> initialized [ 643.202964][ T3779] rc_core: IR keymap rc-imon-pad not found [ 643.208985][ T3779] Registered IR keymap rc-empty [ 643.214064][ T3779] imon 5-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 643.224232][ T3779] imon 5-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 643.234268][T12134] imon:vfd_write: invalid payload size [ 643.240755][T12134] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy 04:07:20 executing program 1: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000007c0)=ANY=[@ANYBLOB="1201000079201010c2154000f3800102030109021b0001000000000904000001e104550009058b0b40"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_connect$uac1(0x2, 0x107, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xf5, 0x3, 0x1, 0x63, 0x80, 0x2, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8}, [@extension_unit={0xa, 0x24, 0x8, 0x2, 0x200, 0xb3, "d7b4ec"}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x300, 0x1, 0x3, 0x6}, @feature_unit={0xf, 0x24, 0x6, 0x1, 0x4, 0x4, [0x7, 0x1, 0x7, 0x2], 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x0, 0x3, 0x3, 0x6, "e593a639179502"}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x0, 0x0, 0x7, "94"}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x3, 0x4, 0x20, 0x7, "", '\x00'}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x1, 0x1, 0x3, 0x4, "", "547ba9"}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x0, 0x90, 0x2, {0x7, 0x25, 0x1, 0x1, 0x40, 0xee83}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0xff, 0x3, 0xff, 0x9, "b92981", "fccc"}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x4, 0x2, 0xff, 0x2, "e251ba"}, @as_header={0x7, 0x24, 0x1, 0x2, 0x7f, 0x1}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x7f, 0xee75, 0x3f, "c5942937ee89c83038"}, @as_header={0x7, 0x24, 0x1, 0x3f, 0x1f}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x0, 0x1, 0x80, "541106bdc683"}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x8, 0x0, 0x40, {0x7, 0x25, 0x1, 0xc0, 0x0, 0x1}}}}}}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x200, 0xf8, 0x6, 0x9, 0x8, 0x80}, 0x41, &(0x7f0000000180)={0x5, 0xf, 0x41, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x9, "bb669d6cd8f9793659d6b8e53b3412a6"}, @ss_container_id={0x14, 0x10, 0x4, 0xd7, "11cd80ff4c06a32c54fabef7140d3cbf"}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "c817b803c58492cc35dfe0dfb7afee58"}]}, 0x3, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0xf8ff}}, {0xf2, &(0x7f0000000240)=@string={0xf2, 0x3, "edb9026d488cc5aca5efef980467a3e3fd6157c10495eba82d89d6f8c27f809e0a713c9115f06f75df48a92f309531fa8166e29942e17021ad1998da3dfff8c1f2f1b38848581cb0a75959424d2d89c5dd3c8211cc797ff046b39cc3600e653b126bbb59d7b6fa95e50efb96ddb69a22f78010b3ca62beb06c683ae55228f9535a20c4e5d3104ba62e19b910d4e85d045812582cde8e7e98e5fb7c44be840581dac412adb585d11d5c7e4d9debc4b5efffd080d3ee38b6258587a5d57d42ebc0bb4c86dace3930bcf6ae513372699da0b989b8bf99db5aceb07f4e73bdea76dd7fa0824c0810a5356e15beae737b9116"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x407}}]}) write$char_usb(r1, 0x0, 0x0) 04:07:20 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time_recursive\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001400)={&(0x7f00000013c0)='ext4_es_find_extent_range_enter\x00'}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r1, 0xff, 0x0, 0x0, 0x0) syncfs(r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r2, &(0x7f0000000000), 0x20b000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000200)='illinois\x00', 0x9) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1b, &(0x7f0000000000)=0xed3a, 0x2) r4 = openat(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x503240, 0x5) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000280)={0x0, &(0x7f00000001c0)}, 0x10) close(0xffffffffffffffff) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e20, @loopback}, 0x10) sendfile(r3, r4, 0x0, 0x90000) recvmsg(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000740)=""/4084, 0xff4}, {&(0x7f0000000300)=""/92, 0x5c}], 0x2}, 0x720) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, 0x0) 04:07:20 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x4c7e, 0xfffffffffffffffd) 04:07:20 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) (async) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) readv(r1, &(0x7f0000000100)=[{&(0x7f0000000440)=""/4096, 0x1000}], 0x8) (async) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{}, {0x0, 0x3938700}}, 0x0) (async) timer_create(0x0, &(0x7f0000000280)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async, rerun: 64) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) (async, rerun: 64) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_USER_CONFIRM_NEG_REPLY}}, 0x7) 04:07:20 executing program 3: r0 = syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="10000000000001000100050000000000ffffff7f200000005a4d", 0x1a, 0x400}, {&(0x7f0000000440)="ff00feffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff00ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff03f0ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffe1ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed41034844d6de4005", 0x809, 0x800}, {0x0, 0x0, 0xa22}], 0x0, &(0x7f0000000500)=ANY=[], 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x10000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8}]}}}]}, 0x3c}}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r2, 0x0, r4, 0x0, 0x4ffe2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000280)) symlinkat(&(0x7f0000002940)='./file0\x00', r0, &(0x7f0000001900)='./file1\x00') r5 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x4040, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r5, 0xc0185879, &(0x7f0000000040)={@id={0x2, 0x0, @auto="001006040000000f00000400"}}) utime(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)={0x1, 0x8000}) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x1, 0x10}, &(0x7f00000000c0)=0xc) mknodat$null(r0, &(0x7f0000000000)='./file1/file0\x00', 0x4, 0x103) openat$full(0xffffffffffffff9c, &(0x7f00000002c0), 0x10040, 0x0) syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="10000000000001000100050000000000ffffff7f200000005a4d", 0x1a, 0x400}, {&(0x7f0000000440)="ff00feffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff00ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff03f0ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffe1ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed41034844d6de4005", 0x809, 0x800}, {0x0, 0x0, 0xa22}], 0x0, &(0x7f0000000500)=ANY=[], 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x10000, 0x0) (async) pipe(&(0x7f00000001c0)) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8}]}}}]}, 0x3c}}, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) close(r4) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) (async) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc) (async) splice(r2, 0x0, r4, 0x0, 0x4ffe2, 0x0) (async) ioctl$sock_inet_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000280)) (async) symlinkat(&(0x7f0000002940)='./file0\x00', r0, &(0x7f0000001900)='./file1\x00') (async) openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x4040, 0x0) (async) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r5, 0xc0185879, &(0x7f0000000040)={@id={0x2, 0x0, @auto="001006040000000f00000400"}}) (async) utime(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)={0x1, 0x8000}) (async) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x1, 0x10}, &(0x7f00000000c0)=0xc) (async) mknodat$null(r0, &(0x7f0000000000)='./file1/file0\x00', 0x4, 0x103) (async) openat$full(0xffffffffffffff9c, &(0x7f00000002c0), 0x10040, 0x0) (async) [ 643.250378][T12134] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 643.262353][ T3694] usb 2-1: USB disconnect, device number 82 [ 643.262655][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored 04:07:20 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x4c81, 0xfffffffffffffffd) 04:07:20 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time_recursive\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001400)={&(0x7f00000013c0)='ext4_es_find_extent_range_enter\x00'}, 0x10) (async) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r1, 0xff, 0x0, 0x0, 0x0) (async) syncfs(r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r2, &(0x7f0000000000), 0x20b000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000200)='illinois\x00', 0x9) (async) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1b, &(0x7f0000000000)=0xed3a, 0x2) (async) r4 = openat(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x503240, 0x5) (async) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000280)={0x0, &(0x7f00000001c0)}, 0x10) close(0xffffffffffffffff) (async) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e20, @loopback}, 0x10) (async) sendfile(r3, r4, 0x0, 0x90000) (async) recvmsg(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000740)=""/4084, 0xff4}, {&(0x7f0000000300)=""/92, 0x5c}], 0x2}, 0x720) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, 0x0) [ 643.308442][T12181] loop3: detected capacity change from 0 to 10 [ 643.364119][ T3779] rc rc1: iMON Remote (15c2:0040) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc1 [ 643.393995][ T3779] input: iMON Remote (15c2:0040) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc1/input240 04:07:20 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x4c82, 0xfffffffffffffffd) [ 643.412024][T12188] deleting an unspecified loop device is not supported. [ 643.419447][T12189] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 643.438493][ T3779] imon 5-1:0.0: iMON device (15c2:0040, intf0) on usb<5:66> initialized [ 643.454745][T12189] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 04:07:20 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) readv(r1, &(0x7f0000000100)=[{&(0x7f0000000440)=""/4096, 0x1000}], 0x8) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f0000000280)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_USER_CONFIRM_NEG_REPLY}}, 0x7) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) (async) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) (async) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) readv(r1, &(0x7f0000000100)=[{&(0x7f0000000440)=""/4096, 0x1000}], 0x8) (async) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) (async) timer_settime(0x0, 0x0, &(0x7f0000000340)={{}, {0x0, 0x3938700}}, 0x0) (async) timer_create(0x0, &(0x7f0000000280)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) (async) timer_settime(r2, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_USER_CONFIRM_NEG_REPLY}}, 0x7) (async) [ 643.517851][ T27] audit: type=1800 audit(1664078840.953:379): pid=12192 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=".pending_reads" dev="sda1" ino=1156 res=0 errno=0 [ 643.637325][ T3779] usb 5-1: USB disconnect, device number 66 [ 643.665929][ T57] kworker/u4:4: attempt to access beyond end of device [ 643.665929][ T57] loop3: rw=1, sector=44, nr_sectors = 2 limit=10 [ 643.689266][ T57] Buffer I/O error on dev loop3, logical block 22, lost async page write [ 643.700045][ T57] kworker/u4:4: attempt to access beyond end of device [ 643.700045][ T57] loop3: rw=1, sector=46, nr_sectors = 2 limit=10 [ 643.715663][ T57] Buffer I/O error on dev loop3, logical block 23, lost async page write [ 643.829263][ T3694] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 644.082762][ T3694] usb 2-1: Using ep0 maxpacket: 16 04:07:21 executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000007c0)=ANY=[@ANYBLOB="1201000079201010c2154000f3800102030109021b0001000000000904000001e104550009058b0b40"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x7a00000000000000) 04:07:21 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time_recursive\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001400)={&(0x7f00000013c0)='ext4_es_find_extent_range_enter\x00'}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r1, 0xff, 0x0, 0x0, 0x0) (async) syncfs(r1) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r2, &(0x7f0000000000), 0x20b000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000200)='illinois\x00', 0x9) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10) (async) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1b, &(0x7f0000000000)=0xed3a, 0x2) (async) r4 = openat(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x503240, 0x5) (async) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000280)={0x0, &(0x7f00000001c0)}, 0x10) close(0xffffffffffffffff) (async) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e20, @loopback}, 0x10) (async) sendfile(r3, r4, 0x0, 0x90000) (async) recvmsg(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000740)=""/4084, 0xff4}, {&(0x7f0000000300)=""/92, 0x5c}], 0x2}, 0x720) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, 0x0) 04:07:21 executing program 3: r0 = syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="10000000000001000100050000000000ffffff7f200000005a4d", 0x1a, 0x400}, {&(0x7f0000000440)="ff00feffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff00ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff03f0ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffe1ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed41034844d6de4005", 0x809, 0x800}, {0x0, 0x0, 0xa22}], 0x0, &(0x7f0000000500)=ANY=[], 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x10000, 0x0) (async) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8}]}}}]}, 0x3c}}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) (async, rerun: 64) socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r2, 0x0, r4, 0x0, 0x4ffe2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000280)) (async, rerun: 64) symlinkat(&(0x7f0000002940)='./file0\x00', r0, &(0x7f0000001900)='./file1\x00') (rerun: 64) r5 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x4040, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r5, 0xc0185879, &(0x7f0000000040)={@id={0x2, 0x0, @auto="001006040000000f00000400"}}) utime(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)={0x1, 0x8000}) (async, rerun: 64) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x1, 0x10}, &(0x7f00000000c0)=0xc) (async, rerun: 64) mknodat$null(r0, &(0x7f0000000000)='./file1/file0\x00', 0x4, 0x103) (async) openat$full(0xffffffffffffff9c, &(0x7f00000002c0), 0x10040, 0x0) [ 644.175687][T12212] loop3: detected capacity change from 0 to 10 [ 644.231217][ T3694] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 644.306803][T12220] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 644.316451][T12220] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 644.334796][ T27] audit: type=1800 audit(1664078841.773:380): pid=12220 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=".pending_reads" dev="sda1" ino=1161 res=0 errno=0 [ 644.361845][ T2432] kworker/u4:5: attempt to access beyond end of device [ 644.361845][ T2432] loop3: rw=1, sector=44, nr_sectors = 2 limit=10 [ 644.379674][ T2432] Buffer I/O error on dev loop3, logical block 22, lost async page write [ 644.389402][ T2432] kworker/u4:5: attempt to access beyond end of device [ 644.389402][ T2432] loop3: rw=1, sector=46, nr_sectors = 2 limit=10 [ 644.406983][ T2432] Buffer I/O error on dev loop3, logical block 23, lost async page write [ 644.454635][ T3694] usb 2-1: New USB device found, idVendor=15c2, idProduct=0040, bcdDevice=80.f3 [ 644.468464][ T3694] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 644.472889][ T142] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 644.477451][ T3694] usb 2-1: Product: syz [ 644.488563][ T3694] usb 2-1: Manufacturer: syz [ 644.493352][ T3694] usb 2-1: SerialNumber: syz [ 644.501412][ T3694] usb 2-1: config 0 descriptor?? [ 644.547648][ T3694] input: iMON Panel, Knob and Mouse(15c2:0040) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input241 [ 644.722702][ T142] usb 5-1: Using ep0 maxpacket: 16 [ 644.842879][ T142] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 644.852720][ T3694] rc_core: IR keymap rc-imon-pad not found [ 644.859661][ T3694] Registered IR keymap rc-empty [ 644.864652][ T3694] imon 2-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 644.875069][ T3694] imon 2-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 644.993840][ T3694] rc rc0: iMON Remote (15c2:0040) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 645.004934][ T3694] input: iMON Remote (15c2:0040) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input242 [ 645.012865][ T142] usb 5-1: New USB device found, idVendor=15c2, idProduct=0040, bcdDevice=80.f3 [ 645.027907][ T3694] imon 2-1:0.0: iMON device (15c2:0040, intf0) on usb<2:83> initialized [ 645.031846][ T142] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 645.053724][ T142] usb 5-1: Product: syz [ 645.058031][ T142] usb 5-1: Manufacturer: syz [ 645.068598][ T142] usb 5-1: SerialNumber: syz [ 645.089070][ T142] usb 5-1: config 0 descriptor?? [ 645.137017][ T142] input: iMON Panel, Knob and Mouse(15c2:0040) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input243 [ 645.175496][T12186] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 645.185996][T12186] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 645.194534][T12186] imon:vfd_write: invalid payload size [ 645.204191][ T3691] usb 2-1: USB disconnect, device number 83 [ 645.423791][ T142] rc_core: IR keymap rc-imon-pad not found [ 645.429659][ T142] Registered IR keymap rc-empty [ 645.435705][ T142] imon 5-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 645.445930][ T142] imon 5-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 645.595772][ T142] rc rc0: iMON Remote (15c2:0040) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 645.607360][ T142] input: iMON Remote (15c2:0040) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input244 [ 645.621243][ T142] imon 5-1:0.0: iMON device (15c2:0040, intf0) on usb<5:67> initialized 04:07:23 executing program 1: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000007c0)=ANY=[@ANYBLOB="1201000079201010c2154000f3800102030109021b0001000000000904000001e104550009058b0b40"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_connect$uac1(0x2, 0x107, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xf5, 0x3, 0x1, 0x63, 0x80, 0x2, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8}, [@extension_unit={0xa, 0x24, 0x8, 0x2, 0x200, 0xb3, "d7b4ec"}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x300, 0x1, 0x3, 0x6}, @feature_unit={0xf, 0x24, 0x6, 0x1, 0x4, 0x4, [0x7, 0x1, 0x7, 0x2], 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x0, 0x3, 0x3, 0x6, "e593a639179502"}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x0, 0x0, 0x7, "94"}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x3, 0x4, 0x20, 0x7, "", '\x00'}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x1, 0x1, 0x3, 0x4, "", "547ba9"}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x0, 0x90, 0x2, {0x7, 0x25, 0x1, 0x1, 0x40, 0xee83}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0xff, 0x3, 0xff, 0x9, "b92981", "fccc"}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x4, 0x2, 0xff, 0x2, "e251ba"}, @as_header={0x7, 0x24, 0x1, 0x2, 0x7f, 0x1}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x7f, 0xee75, 0x3f, "c5942937ee89c83038"}, @as_header={0x7, 0x24, 0x1, 0x3f, 0x1f}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x0, 0x1, 0x80, "541106bdc683"}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x8, 0x0, 0x40, {0x7, 0x25, 0x1, 0xc0, 0x0, 0x1}}}}}}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x200, 0xf8, 0x6, 0x9, 0x8, 0x80}, 0x41, &(0x7f0000000180)={0x5, 0xf, 0x41, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x9, "bb669d6cd8f9793659d6b8e53b3412a6"}, @ss_container_id={0x14, 0x10, 0x4, 0xd7, "11cd80ff4c06a32c54fabef7140d3cbf"}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "c817b803c58492cc35dfe0dfb7afee58"}]}, 0x3, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0xf8ff}}, {0xf2, &(0x7f0000000240)=@string={0xf2, 0x3, "edb9026d488cc5aca5efef980467a3e3fd6157c10495eba82d89d6f8c27f809e0a713c9115f06f75df48a92f309531fa8166e29942e17021ad1998da3dfff8c1f2f1b38848581cb0a75959424d2d89c5dd3c8211cc797ff046b39cc3600e653b126bbb59d7b6fa95e50efb96ddb69a22f78010b3ca62beb06c683ae55228f9535a20c4e5d3104ba62e19b910d4e85d045812582cde8e7e98e5fb7c44be840581dac412adb585d11d5c7e4d9debc4b5efffd080d3ee38b6258587a5d57d42ebc0bb4c86dace3930bcf6ae513372699da0b989b8bf99db5aceb07f4e73bdea76dd7fa0824c0810a5356e15beae737b9116"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x407}}]}) (async) write$char_usb(r1, 0x0, 0x0) 04:07:23 executing program 2: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_USER_CONFIRM_NEG_REPLY}}, 0x7) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd}, "4577ce6b8e33a4772b90e5d6a1"}, 0x11) 04:07:23 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x541b, 0xfffffffffffffffd) 04:07:23 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time_recursive\x00', 0x26e1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x4, &(0x7f0000000300)=ANY=[@ANYRESOCT=r1], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001400)={&(0x7f00000013c0)='ext4_es_find_extent_range_enter\x00'}, 0x10) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r2, 0xff, 0x0, 0x0, 0x0) syncfs(r2) r3 = openat$cgroup_ro(r0, &(0x7f00000000c0)='pids.events\x00', 0x7a05, 0x1700) write$cgroup_type(r3, &(0x7f0000000000), 0x20b000) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000200)='illinois\x00', 0x9) bind$inet(r4, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r4, 0x6, 0x2, &(0x7f0000000000)=0x2805, 0x4) r5 = openat(0xffffffffffffffff, &(0x7f00000002c0)='/proc/self/exe\x00', 0x0, 0x5) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000280)={0x0, &(0x7f00000001c0)}, 0x10) close(0xffffffffffffffff) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e20, @loopback}, 0x10) sendfile(r4, r5, 0x0, 0x90000) recvmsg(r4, &(0x7f0000000580)={0x0, 0x41, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4084, 0xfffffe1f}], 0x6, 0x0, 0xfffffffffffffcc9}, 0x700) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, 0x0) 04:07:23 executing program 3: r0 = syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000180), 0x2100000, &(0x7f0000000500)=ANY=[], 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) setsockopt$MRT_DEL_VIF(0xffffffffffffffff, 0x0, 0xcb, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x2, 0x3, @vifc_lcl_ifindex=r1, @remote}, 0x10) symlinkat(&(0x7f0000002940)='./file0\x00', r0, &(0x7f0000001900)='./file1\x00') 04:07:23 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time_recursive\x00', 0x26e1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x4, &(0x7f0000000300)=ANY=[@ANYRESOCT=r1], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001400)={&(0x7f00000013c0)='ext4_es_find_extent_range_enter\x00'}, 0x10) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r2, 0xff, 0x0, 0x0, 0x0) syncfs(r2) (async) r3 = openat$cgroup_ro(r0, &(0x7f00000000c0)='pids.events\x00', 0x7a05, 0x1700) write$cgroup_type(r3, &(0x7f0000000000), 0x20b000) (async) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000200)='illinois\x00', 0x9) (async) bind$inet(r4, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10) (async) setsockopt$inet_tcp_int(r4, 0x6, 0x2, &(0x7f0000000000)=0x2805, 0x4) (async) r5 = openat(0xffffffffffffffff, &(0x7f00000002c0)='/proc/self/exe\x00', 0x0, 0x5) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000280)={0x0, &(0x7f00000001c0)}, 0x10) (async) close(0xffffffffffffffff) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e20, @loopback}, 0x10) (async) sendfile(r4, r5, 0x0, 0x90000) recvmsg(r4, &(0x7f0000000580)={0x0, 0x41, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4084, 0xfffffe1f}], 0x6, 0x0, 0xfffffffffffffcc9}, 0x700) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, 0x0) 04:07:23 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x5421, 0xfffffffffffffffd) 04:07:23 executing program 2: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_USER_CONFIRM_NEG_REPLY}}, 0x7) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd}, "4577ce6b8e33a4772b90e5d6a1"}, 0x11) 04:07:23 executing program 3: r0 = syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000180), 0x2100000, &(0x7f0000000500)=ANY=[], 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) setsockopt$MRT_DEL_VIF(0xffffffffffffffff, 0x0, 0xcb, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x2, 0x3, @vifc_lcl_ifindex=r1, @remote}, 0x10) symlinkat(&(0x7f0000002940)='./file0\x00', r0, &(0x7f0000001900)='./file1\x00') [ 645.822670][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 645.831635][ T23] usb 5-1: USB disconnect, device number 67 [ 646.032828][ T3691] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 646.282714][ T3691] usb 2-1: Using ep0 maxpacket: 16 04:07:23 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) readv(r1, &(0x7f0000000100)=[{&(0x7f0000000440)=""/4096, 0x1000}], 0x8) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f0000000280)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_USER_CONFIRM_NEG_REPLY}}, 0x7) 04:07:23 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time_recursive\x00', 0x26e1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x4, &(0x7f0000000300)=ANY=[@ANYRESOCT=r1], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001400)={&(0x7f00000013c0)='ext4_es_find_extent_range_enter\x00'}, 0x10) (async) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r2, 0xff, 0x0, 0x0, 0x0) syncfs(r2) (async) r3 = openat$cgroup_ro(r0, &(0x7f00000000c0)='pids.events\x00', 0x7a05, 0x1700) write$cgroup_type(r3, &(0x7f0000000000), 0x20b000) (async) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000200)='illinois\x00', 0x9) (async) bind$inet(r4, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10) (async) setsockopt$inet_tcp_int(r4, 0x6, 0x2, &(0x7f0000000000)=0x2805, 0x4) r5 = openat(0xffffffffffffffff, &(0x7f00000002c0)='/proc/self/exe\x00', 0x0, 0x5) (async) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000280)={0x0, &(0x7f00000001c0)}, 0x10) (async) close(0xffffffffffffffff) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e20, @loopback}, 0x10) (async) sendfile(r4, r5, 0x0, 0x90000) (async) recvmsg(r4, &(0x7f0000000580)={0x0, 0x41, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4084, 0xfffffe1f}], 0x6, 0x0, 0xfffffffffffffcc9}, 0x700) (async) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, 0x0) 04:07:23 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x5450, 0xfffffffffffffffd) [ 646.409337][ T3691] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 646.582869][ T3691] usb 2-1: New USB device found, idVendor=15c2, idProduct=0040, bcdDevice=80.f3 [ 646.592018][ T3691] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 646.605925][ T3691] usb 2-1: Product: syz [ 646.610113][ T3691] usb 2-1: Manufacturer: syz [ 646.616431][ T3691] usb 2-1: SerialNumber: syz [ 646.626780][ T3691] usb 2-1: config 0 descriptor?? [ 646.665901][ T3691] input: iMON Panel, Knob and Mouse(15c2:0040) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input245 04:07:24 executing program 1: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000007c0)=ANY=[@ANYBLOB="1201000079201010c2154000f3800102030109021b0001000000000904000001e104550009058b0b40"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_connect$uac1(0x2, 0x107, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xf5, 0x3, 0x1, 0x63, 0x80, 0x2, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8}, [@extension_unit={0xa, 0x24, 0x8, 0x2, 0x200, 0xb3, "d7b4ec"}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x300, 0x1, 0x3, 0x6}, @feature_unit={0xf, 0x24, 0x6, 0x1, 0x4, 0x4, [0x7, 0x1, 0x7, 0x2], 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x0, 0x3, 0x3, 0x6, "e593a639179502"}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x0, 0x0, 0x7, "94"}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x3, 0x4, 0x20, 0x7, "", '\x00'}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x1, 0x1, 0x3, 0x4, "", "547ba9"}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x0, 0x90, 0x2, {0x7, 0x25, 0x1, 0x1, 0x40, 0xee83}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0xff, 0x3, 0xff, 0x9, "b92981", "fccc"}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x4, 0x2, 0xff, 0x2, "e251ba"}, @as_header={0x7, 0x24, 0x1, 0x2, 0x7f, 0x1}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x7f, 0xee75, 0x3f, "c5942937ee89c83038"}, @as_header={0x7, 0x24, 0x1, 0x3f, 0x1f}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x0, 0x1, 0x80, "541106bdc683"}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x8, 0x0, 0x40, {0x7, 0x25, 0x1, 0xc0, 0x0, 0x1}}}}}}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x200, 0xf8, 0x6, 0x9, 0x8, 0x80}, 0x41, &(0x7f0000000180)={0x5, 0xf, 0x41, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x9, "bb669d6cd8f9793659d6b8e53b3412a6"}, @ss_container_id={0x14, 0x10, 0x4, 0xd7, "11cd80ff4c06a32c54fabef7140d3cbf"}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "c817b803c58492cc35dfe0dfb7afee58"}]}, 0x3, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0xf8ff}}, {0xf2, &(0x7f0000000240)=@string={0xf2, 0x3, "edb9026d488cc5aca5efef980467a3e3fd6157c10495eba82d89d6f8c27f809e0a713c9115f06f75df48a92f309531fa8166e29942e17021ad1998da3dfff8c1f2f1b38848581cb0a75959424d2d89c5dd3c8211cc797ff046b39cc3600e653b126bbb59d7b6fa95e50efb96ddb69a22f78010b3ca62beb06c683ae55228f9535a20c4e5d3104ba62e19b910d4e85d045812582cde8e7e98e5fb7c44be840581dac412adb585d11d5c7e4d9debc4b5efffd080d3ee38b6258587a5d57d42ebc0bb4c86dace3930bcf6ae513372699da0b989b8bf99db5aceb07f4e73bdea76dd7fa0824c0810a5356e15beae737b9116"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x407}}]}) (async) write$char_usb(r1, 0x0, 0x0) 04:07:24 executing program 2: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_USER_CONFIRM_NEG_REPLY}}, 0x7) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd}, "4577ce6b8e33a4772b90e5d6a1"}, 0x11) 04:07:24 executing program 3: r0 = syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000180), 0x2100000, &(0x7f0000000500)=ANY=[], 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) setsockopt$MRT_DEL_VIF(0xffffffffffffffff, 0x0, 0xcb, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x2, 0x3, @vifc_lcl_ifindex=r1, @remote}, 0x10) (async) symlinkat(&(0x7f0000002940)='./file0\x00', r0, &(0x7f0000001900)='./file1\x00') 04:07:24 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x5451, 0xfffffffffffffffd) 04:07:24 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time_recursive\x00', 0x26e1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="30a35d98ecf45011da71092155f557dd2411ae57083d07cfaa", @ANYRESDEC=r0, @ANYRES32, @ANYRESOCT=r0, @ANYRESOCT, @ANYRES32=r1], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001400)={&(0x7f00000013c0)='ext4_es_find_extent_range_enter\x00'}, 0x10) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r2, 0xff, 0x0, 0x0, 0x0) syncfs(r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r3, &(0x7f0000000000), 0x20b000) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000200)='illinois\x00', 0x9) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f00000000c0)=0x2806, 0x4) r5 = openat(0xffffffffffffffff, &(0x7f00000002c0)='/proc/self/exe\x00', 0x0, 0x2c7) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000280)={0x0, &(0x7f00000001c0)}, 0x10) close(0xffffffffffffffff) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e20, @loopback}, 0x10) sendfile(r4, r5, 0x0, 0x90000) recvmsg(r4, &(0x7f0000000580)={0x0, 0x41, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4084, 0xfffffe1f}], 0x6, 0x0, 0xfffffffffffffcc9}, 0x700) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, 0x0) 04:07:24 executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000007c0)=ANY=[@ANYBLOB="1201000079201010c2154000f3800102030109021b0001000000000904000001e104550009058b0b40"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x6800000000000000) [ 646.869020][T12259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 646.877780][T12259] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 646.904527][ T3691] imon:send_packet: packet tx failed (-71) 04:07:24 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x5452, 0xfffffffffffffffd) 04:07:24 executing program 2: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_USER_CONFIRM_NEG_REPLY}}, 0x7) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) [ 646.932696][ T3691] imon 2-1:0.0: panel buttons/knobs setup failed 04:07:24 executing program 3: r0 = syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x516, 0x5, &(0x7f0000000200)=[{&(0x7f0000000080)="1000000000000100017f200000005a4d9aad5015ce15686eafe151b58648baf247cd52e85543a5dc5bb786890f25b8b60ad5523fb724d7f089d221f5af687aee7797bf82139caa8d400d9149825d38d229864c138f06235d", 0xfce5, 0x400}, {&(0x7f0000000c80)="ff00feffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff00ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff03f0ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffdfffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffe1fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff7ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed41034844d6de400587351764743657388194a65626ab7c4affd9ec0cd7f978d8003b316ec6cb9cf92d6cdd22e77cfe16bff9c4a227e2d6c657f29cf29134ecb7b476d1bdd1accea0050703ef1862d5693f98ad1c84dbd4ae7186d67d8ad172f7f567156adb2a0ccac17a5e9d8dd051f39654e57beff3d146bda0e7aa0d86679712a00723b7ad7dce82d788c7ca2bb1a82fcfbddf5d", 0x896, 0x800}, {0x0, 0x0, 0x1400}, {&(0x7f0000001940)="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", 0x1011, 0x827}, {&(0x7f0000000000)="32ceb7164e0ee7", 0x7, 0x8001}], 0x0, &(0x7f0000000500)=ANY=[], 0x0) symlinkat(&(0x7f0000002940)='./file0\x00', r0, &(0x7f0000001900)='./file1\x00') open(&(0x7f0000000100)='./file0\x00', 0x200000, 0x0) 04:07:24 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time_recursive\x00', 0x26e1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="30a35d98ecf45011da71092155f557dd2411ae57083d07cfaa", @ANYRESDEC=r0, @ANYRES32, @ANYRESOCT=r0, @ANYRESOCT, @ANYRES32=r1], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001400)={&(0x7f00000013c0)='ext4_es_find_extent_range_enter\x00'}, 0x10) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r2, 0xff, 0x0, 0x0, 0x0) syncfs(r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r3, &(0x7f0000000000), 0x20b000) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000200)='illinois\x00', 0x9) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f00000000c0)=0x2806, 0x4) r5 = openat(0xffffffffffffffff, &(0x7f00000002c0)='/proc/self/exe\x00', 0x0, 0x2c7) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000280)={0x0, &(0x7f00000001c0)}, 0x10) close(0xffffffffffffffff) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e20, @loopback}, 0x10) sendfile(r4, r5, 0x0, 0x90000) recvmsg(r4, &(0x7f0000000580)={0x0, 0x41, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4084, 0xfffffe1f}], 0x6, 0x0, 0xfffffffffffffcc9}, 0x700) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time_recursive\x00', 0x26e1, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="30a35d98ecf45011da71092155f557dd2411ae57083d07cfaa", @ANYRESDEC=r0, @ANYRES32, @ANYRESOCT=r0, @ANYRESOCT, @ANYRES32=r1], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001400)={&(0x7f00000013c0)='ext4_es_find_extent_range_enter\x00'}, 0x10) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) getsockopt(r2, 0xff, 0x0, 0x0, 0x0) (async) syncfs(r2) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async) write$cgroup_type(r3, &(0x7f0000000000), 0x20b000) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000200)='illinois\x00', 0x9) (async) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10) (async) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f00000000c0)=0x2806, 0x4) (async) openat(0xffffffffffffffff, &(0x7f00000002c0)='/proc/self/exe\x00', 0x0, 0x2c7) (async) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000280)={0x0, &(0x7f00000001c0)}, 0x10) (async) close(0xffffffffffffffff) (async) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e20, @loopback}, 0x10) (async) sendfile(r4, r5, 0x0, 0x90000) (async) recvmsg(r4, &(0x7f0000000580)={0x0, 0x41, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4084, 0xfffffe1f}], 0x6, 0x0, 0xfffffffffffffcc9}, 0x700) (async) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, 0x0) (async) 04:07:24 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x5460, 0xfffffffffffffffd) 04:07:24 executing program 2: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_USER_CONFIRM_NEG_REPLY}}, 0x7) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_USER_CONFIRM_NEG_REPLY}}, 0x7) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) (async) [ 647.062992][ T3691] rc_core: IR keymap rc-imon-pad not found [ 647.069214][ T3691] Registered IR keymap rc-empty [ 647.091298][ T3691] imon 2-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 647.104793][T12283] loop3: detected capacity change from 0 to 128 [ 647.128886][ T3691] imon 2-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 647.157727][T12283] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop3. [ 647.182945][ T3691] imon:send_packet: packet tx failed (-71) [ 647.212754][ T3691] imon 2-1:0.0: remote input dev register failed [ 647.219978][ T3691] imon 2-1:0.0: imon_init_intf0: rc device setup failed [ 647.262845][ T3691] imon 2-1:0.0: unable to initialize intf0, err 0 [ 647.269635][ T3691] imon:imon_probe: failed to initialize context! [ 647.299302][ T3691] imon 2-1:0.0: unable to register, err -19 [ 647.316581][ T3691] usb 2-1: USB disconnect, device number 84 [ 647.352736][ T3694] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 647.592838][ T3694] usb 5-1: Using ep0 maxpacket: 16 [ 647.702721][ T3691] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 647.732913][ T3694] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 647.913654][ T3694] usb 5-1: New USB device found, idVendor=15c2, idProduct=0040, bcdDevice=80.f3 [ 647.922821][ T3694] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 647.930817][ T3694] usb 5-1: Product: syz [ 647.935023][ T3694] usb 5-1: Manufacturer: syz [ 647.939644][ T3694] usb 5-1: SerialNumber: syz [ 647.942665][ T3691] usb 2-1: Using ep0 maxpacket: 16 [ 647.951291][ T3694] usb 5-1: config 0 descriptor?? [ 647.999832][ T3694] input: iMON Panel, Knob and Mouse(15c2:0040) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input247 [ 648.062816][ T3691] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 648.233747][ T3691] usb 2-1: New USB device found, idVendor=15c2, idProduct=0040, bcdDevice=80.f3 [ 648.251588][ T3691] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 648.260592][ T3691] usb 2-1: Product: syz [ 648.269707][ T3691] usb 2-1: Manufacturer: syz [ 648.274442][ T3691] usb 2-1: SerialNumber: syz [ 648.281912][ T3691] usb 2-1: config 0 descriptor?? [ 648.312890][ T3694] rc_core: IR keymap rc-imon-pad not found [ 648.318745][ T3694] Registered IR keymap rc-empty [ 648.324502][ T3694] imon 5-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 648.325612][ T3691] input: iMON Panel, Knob and Mouse(15c2:0040) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input249 [ 648.335120][ T3694] imon 5-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 648.453571][ T3694] rc rc0: iMON Remote (15c2:0040) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 648.468295][ T3694] input: iMON Remote (15c2:0040) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input248 [ 648.483553][ T3694] imon 5-1:0.0: iMON device (15c2:0040, intf0) on usb<5:68> initialized [ 648.637914][ T3691] rc_core: IR keymap rc-imon-pad not found [ 648.644547][ T3779] usb 5-1: USB disconnect, device number 68 [ 648.645045][ T3691] Registered IR keymap rc-empty [ 648.658641][ T3691] imon 2-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 648.669460][ T3691] imon 2-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 648.748325][T12291] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 648.757446][T12291] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 648.783632][ T3691] rc rc1: iMON Remote (15c2:0040) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc1 [ 648.798482][ T3691] input: iMON Remote (15c2:0040) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc1/input250 [ 648.812169][ T3691] imon 2-1:0.0: iMON device (15c2:0040, intf0) on usb<2:85> initialized [ 648.967945][ T3694] usb 2-1: USB disconnect, device number 85 04:07:26 executing program 1: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000007c0)=ANY=[@ANYBLOB="1201000079201010c2154000f3800102030109021b0001000000000904000001e104550009058b0b40"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io(r0, &(0x7f0000000200)={0x2c, &(0x7f0000000000)={0x0, 0x22, 0x5f, {0x5f, 0xc, "af18da9f3a80a30c9b27db7752870ddf348dcf06d596814a735064898926c74f5b7c01f39d950ed79fd556b7c14813d21cdcf7c539b6e13152369993560b307f44d56922a619b0917e38f0091db48397d43140aaf7dc224ab50eda6b0c"}}, &(0x7f0000000080)={0x0, 0x3, 0x3d, @string={0x3d, 0x3, "7c5bdbd99b74834596a0286e1b5931cc85e374b18f10200ecfbad30411f8176dbbc0fdc5c27a65f66d30ef806d2a0c7c52b867bfbc4397a00c0d6f"}}, &(0x7f0000000100)={0x0, 0xf, 0x5d, {0x5, 0xf, 0x5d, 0x6, [@wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x1f, 0xba, 0x40, 0x5}, @ext_cap={0x7, 0x10, 0x2, 0x1e, 0xf, 0xa, 0x7}, @wireless={0xb, 0x10, 0x1, 0xc, 0xa8, 0x1, 0x20, 0x8, 0x39}, @wireless={0xb, 0x10, 0x1, 0x4, 0x0, 0x20, 0x7, 0x3, 0xf8}, @ssp_cap={0x1c, 0x10, 0xa, 0x6e, 0x4, 0x1, 0xff00, 0x35dc, [0xc0, 0xff3f30, 0xc000, 0x3f00]}, @ssp_cap={0x14, 0x10, 0xa, 0x1, 0x2, 0x0, 0xff0f, 0x4, [0x3fc0, 0xc0]}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x98, 0xfd, 0x2, "fd87f8bb", "bcaac8e2"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x1, 0x1e, 0xf7, 0x80, 0x80}}}, &(0x7f0000000680)={0x84, &(0x7f0000000240)={0x20, 0x1, 0x59, "022325cf9ed26ee8872912177ad30087116dc5cfe2c01dd190a5a3557889dc1d69a2bafce53edb39081004d9750a3768110e8c984ae9ba5624a1103867bfae40d91e1925cce789ead8e1a474c84be7730267d994318e834470"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x1f}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000340)={0x20, 0x0, 0x4, {0x7, 0x1}}, &(0x7f0000000380)={0x20, 0x0, 0x8, {0x1c00, 0x1, [0xf000]}}, &(0x7f00000003c0)={0x40, 0x7, 0x2, 0x7fff}, &(0x7f0000000400)={0x40, 0x9, 0x1, 0x3f}, &(0x7f0000000440)={0x40, 0xb, 0x2, "b021"}, &(0x7f0000000480)={0x40, 0xf, 0x2, 0x800}, &(0x7f00000004c0)={0x40, 0x13, 0x6, @random="6f600312a935"}, &(0x7f0000000500)={0x40, 0x17, 0x6, @local}, &(0x7f0000000540)={0x40, 0x19, 0x2, "340f"}, &(0x7f0000000580)={0x40, 0x1a, 0x2, 0x9}, &(0x7f00000005c0)={0x40, 0x1c, 0x1, 0x5}, &(0x7f0000000600)={0x40, 0x1e, 0x1, 0xff}, &(0x7f0000000640)={0x40, 0x21, 0x1, 0x4}}) write$char_usb(r1, 0x0, 0x0) 04:07:26 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time_recursive\x00', 0x26e1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="30a35d98ecf45011da71092155f557dd2411ae57083d07cfaa", @ANYRESDEC=r0, @ANYRES32, @ANYRESOCT=r0, @ANYRESOCT, @ANYRES32=r1], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001400)={&(0x7f00000013c0)='ext4_es_find_extent_range_enter\x00'}, 0x10) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r2, 0xff, 0x0, 0x0, 0x0) syncfs(r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r3, &(0x7f0000000000), 0x20b000) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000200)='illinois\x00', 0x9) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f00000000c0)=0x2806, 0x4) r5 = openat(0xffffffffffffffff, &(0x7f00000002c0)='/proc/self/exe\x00', 0x0, 0x2c7) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000280)={0x0, &(0x7f00000001c0)}, 0x10) close(0xffffffffffffffff) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e20, @loopback}, 0x10) sendfile(r4, r5, 0x0, 0x90000) recvmsg(r4, &(0x7f0000000580)={0x0, 0x41, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4084, 0xfffffe1f}], 0x6, 0x0, 0xfffffffffffffcc9}, 0x700) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time_recursive\x00', 0x26e1, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="30a35d98ecf45011da71092155f557dd2411ae57083d07cfaa", @ANYRESDEC=r0, @ANYRES32, @ANYRESOCT=r0, @ANYRESOCT, @ANYRES32=r1], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001400)={&(0x7f00000013c0)='ext4_es_find_extent_range_enter\x00'}, 0x10) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) getsockopt(r2, 0xff, 0x0, 0x0, 0x0) (async) syncfs(r2) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async) write$cgroup_type(r3, &(0x7f0000000000), 0x20b000) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000200)='illinois\x00', 0x9) (async) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10) (async) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f00000000c0)=0x2806, 0x4) (async) openat(0xffffffffffffffff, &(0x7f00000002c0)='/proc/self/exe\x00', 0x0, 0x2c7) (async) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000280)={0x0, &(0x7f00000001c0)}, 0x10) (async) close(0xffffffffffffffff) (async) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e20, @loopback}, 0x10) (async) sendfile(r4, r5, 0x0, 0x90000) (async) recvmsg(r4, &(0x7f0000000580)={0x0, 0x41, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4084, 0xfffffe1f}], 0x6, 0x0, 0xfffffffffffffcc9}, 0x700) (async) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, 0x0) (async) 04:07:26 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x8933, 0xfffffffffffffffd) 04:07:26 executing program 3: r0 = syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x516, 0x5, &(0x7f0000000200)=[{&(0x7f0000000080)="1000000000000100017f200000005a4d9aad5015ce15686eafe151b58648baf247cd52e85543a5dc5bb786890f25b8b60ad5523fb724d7f089d221f5af687aee7797bf82139caa8d400d9149825d38d229864c138f06235d", 0xfce5, 0x400}, {&(0x7f0000000c80)="ff00feffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff00ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff03f0ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffdfffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffe1fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff7ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed41034844d6de400587351764743657388194a65626ab7c4affd9ec0cd7f978d8003b316ec6cb9cf92d6cdd22e77cfe16bff9c4a227e2d6c657f29cf29134ecb7b476d1bdd1accea0050703ef1862d5693f98ad1c84dbd4ae7186d67d8ad172f7f567156adb2a0ccac17a5e9d8dd051f39654e57beff3d146bda0e7aa0d86679712a00723b7ad7dce82d788c7ca2bb1a82fcfbddf5d", 0x896, 0x800}, {0x0, 0x0, 0x1400}, {&(0x7f0000001940)="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", 0x1011, 0x827}, {&(0x7f0000000000)="32ceb7164e0ee7", 0x7, 0x8001}], 0x0, &(0x7f0000000500)=ANY=[], 0x0) symlinkat(&(0x7f0000002940)='./file0\x00', r0, &(0x7f0000001900)='./file1\x00') (async, rerun: 32) open(&(0x7f0000000100)='./file0\x00', 0x200000, 0x0) (rerun: 32) 04:07:26 executing program 2: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_USER_CONFIRM_NEG_REPLY}}, 0x7) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_USER_CONFIRM_NEG_REPLY}}, 0x7) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) (async) 04:07:26 executing program 4: r0 = syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="10000000000001000100050000000000ffffff7f200000005a4d", 0x1a, 0x400}, {&(0x7f0000000440)="ff00feffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff00ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff03f0ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffe1ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed41034844d6de4005", 0x809, 0x800}, {0x0, 0x0, 0x1400}], 0x0, &(0x7f0000000500)=ANY=[], 0x0) symlinkat(&(0x7f0000002940)='./file0\x00', r0, &(0x7f0000001900)='./file1\x00') r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x3, 0x8c4, 0x2c, 0x800, 0x1, 0xfff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x3, 0x1}, 0x48) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r1, 0x8008f512, &(0x7f0000000000)) 04:07:26 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40000, 0xfffffffffffffffd) 04:07:26 executing program 2: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_USER_CONFIRM_NEG_REPLY={{}, 0x3}}}, 0x7) 04:07:27 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time_recursive\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001400)={&(0x7f00000013c0)='workqueue_execute_start\x00'}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r1, 0xff, 0x0, 0x0, 0x0) syncfs(r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r2, &(0x7f0000000000), 0x20b000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000200)='illinois\x00', 0x9) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000000)=0x2805, 0x4) r4 = openat(0xffffffffffffffff, &(0x7f00000002c0)='/proc/self/exe\x00', 0x0, 0x5) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000280)={0x0, &(0x7f00000001c0)}, 0x10) close(0xffffffffffffffff) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e20, @loopback}, 0x10) sendfile(r3, r4, 0x0, 0x90000) recvmsg(r3, &(0x7f0000000580)={0x0, 0x41, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4084, 0xfffffe1f}], 0x6, 0x0, 0xfffffffffffffcc9}, 0x700) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, 0x0) [ 649.510972][T12302] loop4: detected capacity change from 0 to 20 [ 649.523720][T12303] loop3: detected capacity change from 0 to 128 04:07:27 executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000007c0)=ANY=[@ANYBLOB="1201000079201010c2154000f3800102030109021b00010000000009040000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 04:07:27 executing program 2: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_USER_CONFIRM_NEG_REPLY={{}, 0x3}}}, 0x7) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_USER_CONFIRM_NEG_REPLY={{}, 0x3}}}, 0x7) (async) [ 649.568231][T12303] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop3. [ 649.602108][ T2432] kworker/u4:5: attempt to access beyond end of device [ 649.602108][ T2432] loop4: rw=1, sector=44, nr_sectors = 2 limit=20 04:07:27 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x400448c9, 0xfffffffffffffffd) [ 649.647443][ T2432] Buffer I/O error on dev loop4, logical block 22, lost async page write [ 649.673012][ T2432] kworker/u4:5: attempt to access beyond end of device [ 649.673012][ T2432] loop4: rw=1, sector=46, nr_sectors = 2 limit=20 [ 649.721734][ T2432] Buffer I/O error on dev loop4, logical block 23, lost async page write [ 649.862960][ T3691] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 650.012739][ T3694] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 650.112884][ T3691] usb 2-1: Using ep0 maxpacket: 16 [ 650.242950][ T3691] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 650.252718][ T3694] usb 5-1: Using ep0 maxpacket: 16 [ 650.377391][ T3694] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 650.412896][ T3691] usb 2-1: New USB device found, idVendor=15c2, idProduct=0040, bcdDevice=80.f3 [ 650.422177][ T3691] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 650.430293][ T3691] usb 2-1: Product: syz [ 650.434533][ T3691] usb 2-1: Manufacturer: syz [ 650.439142][ T3691] usb 2-1: SerialNumber: syz [ 650.446856][ T3691] usb 2-1: config 0 descriptor?? [ 650.485335][ T3691] input: iMON Panel, Knob and Mouse(15c2:0040) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input251 [ 650.542877][ T3694] usb 5-1: New USB device found, idVendor=15c2, idProduct=0040, bcdDevice=80.f3 [ 650.552505][ T3694] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 650.560690][ T3694] usb 5-1: Product: syz [ 650.564958][ T3694] usb 5-1: Manufacturer: syz [ 650.569564][ T3694] usb 5-1: SerialNumber: syz [ 650.576227][ T3694] usb 5-1: config 0 descriptor?? [ 650.615408][ T3694] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 650.623290][ T3694] imon 5-1:0.0: unable to initialize intf0, err -19 [ 650.629915][ T3694] imon:imon_probe: failed to initialize context! [ 650.636933][ T3694] imon 5-1:0.0: unable to register, err -19 [ 650.782953][ T3691] rc_core: IR keymap rc-imon-pad not found [ 650.789006][ T3691] Registered IR keymap rc-empty [ 650.800314][ T3691] imon 2-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 650.810617][ T3691] imon 2-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 650.943773][ T3691] rc rc0: iMON Remote (15c2:0040) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 650.961074][ T3691] input: iMON Remote (15c2:0040) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input252 [ 650.973753][ T3691] imon 2-1:0.0: iMON device (15c2:0040, intf0) on usb<2:86> initialized [ 651.468145][T12322] imon:vfd_write: invalid payload size 04:07:30 executing program 1: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000007c0)=ANY=[@ANYBLOB="1201000079201010c2154000f3800102030109021b0001000000000904000001e104550009058b0b40"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io(r0, &(0x7f0000000200)={0x2c, &(0x7f0000000000)={0x0, 0x22, 0x5f, {0x5f, 0xc, "af18da9f3a80a30c9b27db7752870ddf348dcf06d596814a735064898926c74f5b7c01f39d950ed79fd556b7c14813d21cdcf7c539b6e13152369993560b307f44d56922a619b0917e38f0091db48397d43140aaf7dc224ab50eda6b0c"}}, &(0x7f0000000080)={0x0, 0x3, 0x3d, @string={0x3d, 0x3, "7c5bdbd99b74834596a0286e1b5931cc85e374b18f10200ecfbad30411f8176dbbc0fdc5c27a65f66d30ef806d2a0c7c52b867bfbc4397a00c0d6f"}}, &(0x7f0000000100)={0x0, 0xf, 0x5d, {0x5, 0xf, 0x5d, 0x6, [@wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x1f, 0xba, 0x40, 0x5}, @ext_cap={0x7, 0x10, 0x2, 0x1e, 0xf, 0xa, 0x7}, @wireless={0xb, 0x10, 0x1, 0xc, 0xa8, 0x1, 0x20, 0x8, 0x39}, @wireless={0xb, 0x10, 0x1, 0x4, 0x0, 0x20, 0x7, 0x3, 0xf8}, @ssp_cap={0x1c, 0x10, 0xa, 0x6e, 0x4, 0x1, 0xff00, 0x35dc, [0xc0, 0xff3f30, 0xc000, 0x3f00]}, @ssp_cap={0x14, 0x10, 0xa, 0x1, 0x2, 0x0, 0xff0f, 0x4, [0x3fc0, 0xc0]}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x98, 0xfd, 0x2, "fd87f8bb", "bcaac8e2"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x1, 0x1e, 0xf7, 0x80, 0x80}}}, &(0x7f0000000680)={0x84, &(0x7f0000000240)={0x20, 0x1, 0x59, "022325cf9ed26ee8872912177ad30087116dc5cfe2c01dd190a5a3557889dc1d69a2bafce53edb39081004d9750a3768110e8c984ae9ba5624a1103867bfae40d91e1925cce789ead8e1a474c84be7730267d994318e834470"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x1f}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000340)={0x20, 0x0, 0x4, {0x7, 0x1}}, &(0x7f0000000380)={0x20, 0x0, 0x8, {0x1c00, 0x1, [0xf000]}}, &(0x7f00000003c0)={0x40, 0x7, 0x2, 0x7fff}, &(0x7f0000000400)={0x40, 0x9, 0x1, 0x3f}, &(0x7f0000000440)={0x40, 0xb, 0x2, "b021"}, &(0x7f0000000480)={0x40, 0xf, 0x2, 0x800}, &(0x7f00000004c0)={0x40, 0x13, 0x6, @random="6f600312a935"}, &(0x7f0000000500)={0x40, 0x17, 0x6, @local}, &(0x7f0000000540)={0x40, 0x19, 0x2, "340f"}, &(0x7f0000000580)={0x40, 0x1a, 0x2, 0x9}, &(0x7f00000005c0)={0x40, 0x1c, 0x1, 0x5}, &(0x7f0000000600)={0x40, 0x1e, 0x1, 0xff}, &(0x7f0000000640)={0x40, 0x21, 0x1, 0x4}}) write$char_usb(r1, 0x0, 0x0) 04:07:30 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time_recursive\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001400)={&(0x7f00000013c0)='workqueue_execute_start\x00'}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r1, 0xff, 0x0, 0x0, 0x0) syncfs(r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r2, &(0x7f0000000000), 0x20b000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000200)='illinois\x00', 0x9) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000000)=0x2805, 0x4) r4 = openat(0xffffffffffffffff, &(0x7f00000002c0)='/proc/self/exe\x00', 0x0, 0x5) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000280)={0x0, &(0x7f00000001c0)}, 0x10) close(0xffffffffffffffff) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e20, @loopback}, 0x10) sendfile(r3, r4, 0x0, 0x90000) recvmsg(r3, &(0x7f0000000580)={0x0, 0x41, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4084, 0xfffffe1f}], 0x6, 0x0, 0xfffffffffffffcc9}, 0x700) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time_recursive\x00', 0x26e1, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001400)={&(0x7f00000013c0)='workqueue_execute_start\x00'}, 0x10) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) getsockopt(r1, 0xff, 0x0, 0x0, 0x0) (async) syncfs(r1) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async) write$cgroup_type(r2, &(0x7f0000000000), 0x20b000) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000200)='illinois\x00', 0x9) (async) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10) (async) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000000)=0x2805, 0x4) (async) openat(0xffffffffffffffff, &(0x7f00000002c0)='/proc/self/exe\x00', 0x0, 0x5) (async) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000280)={0x0, &(0x7f00000001c0)}, 0x10) (async) close(0xffffffffffffffff) (async) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e20, @loopback}, 0x10) (async) sendfile(r3, r4, 0x0, 0x90000) (async) recvmsg(r3, &(0x7f0000000580)={0x0, 0x41, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4084, 0xfffffe1f}], 0x6, 0x0, 0xfffffffffffffcc9}, 0x700) (async) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, 0x0) (async) 04:07:30 executing program 3: r0 = syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x516, 0x5, &(0x7f0000000200)=[{&(0x7f0000000080)="1000000000000100017f200000005a4d9aad5015ce15686eafe151b58648baf247cd52e85543a5dc5bb786890f25b8b60ad5523fb724d7f089d221f5af687aee7797bf82139caa8d400d9149825d38d229864c138f06235d", 0xfce5, 0x400}, {&(0x7f0000000c80)="ff00feffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff00ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff03f0ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffdfffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffe1fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff7ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed41034844d6de400587351764743657388194a65626ab7c4affd9ec0cd7f978d8003b316ec6cb9cf92d6cdd22e77cfe16bff9c4a227e2d6c657f29cf29134ecb7b476d1bdd1accea0050703ef1862d5693f98ad1c84dbd4ae7186d67d8ad172f7f567156adb2a0ccac17a5e9d8dd051f39654e57beff3d146bda0e7aa0d86679712a00723b7ad7dce82d788c7ca2bb1a82fcfbddf5d", 0x896, 0x800}, {0x0, 0x0, 0x1400}, {&(0x7f0000001940)="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", 0x1011, 0x827}, {&(0x7f0000000000)="32ceb7164e0ee7", 0x7, 0x8001}], 0x0, &(0x7f0000000500)=ANY=[], 0x0) symlinkat(&(0x7f0000002940)='./file0\x00', r0, &(0x7f0000001900)='./file1\x00') open(&(0x7f0000000100)='./file0\x00', 0x200000, 0x0) syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x516, 0x5, &(0x7f0000000200)=[{&(0x7f0000000080)="1000000000000100017f200000005a4d9aad5015ce15686eafe151b58648baf247cd52e85543a5dc5bb786890f25b8b60ad5523fb724d7f089d221f5af687aee7797bf82139caa8d400d9149825d38d229864c138f06235d", 0xfce5, 0x400}, {&(0x7f0000000c80)="ff00feffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff00ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff03f0ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffdfffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffe1fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff7ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed41034844d6de400587351764743657388194a65626ab7c4affd9ec0cd7f978d8003b316ec6cb9cf92d6cdd22e77cfe16bff9c4a227e2d6c657f29cf29134ecb7b476d1bdd1accea0050703ef1862d5693f98ad1c84dbd4ae7186d67d8ad172f7f567156adb2a0ccac17a5e9d8dd051f39654e57beff3d146bda0e7aa0d86679712a00723b7ad7dce82d788c7ca2bb1a82fcfbddf5d", 0x896, 0x800}, {0x0, 0x0, 0x1400}, {&(0x7f0000001940)="9c77409b28a96a1d4a07120cf8e2f6ee7d181eea5bfbf7ad69b2a16e629f23ca2c79bb7db9b10480304d7d0060be3163c348788e3f8b3e347f1865a7ca368ca5c8b73b0953b58f86e310b149ee90ec4b7d0cd6fa966cdde42302309cceca1e17280d758d2841992238ef4a0ff506cc0602fd194d038191d0a94e9879a97ddfc0d4953509713981429c0274ee626c0def281cbcb1ca020f4485ce71278cfcdc3c7f3fa2dce6be48265f67e14d778cbd54f721bd91ff8cfb64b6efd742ebefc64f325f1ef062fa3d978cd352eee9c936ea45e00746b9b5cf773d921693f7e5270caf2a1b3c51bfc03a1dbfb335d4321c54b75f681381422bc3d2cce6e82d5ab1483c3d2492fccee0589bc58b77589e52c12498bab60a816645ccfe3a58e7a5e75adf5dbccbe884dd76679bf9572385f55c5240dad779e113a6c5f26cc27d58fc251ff0fb35127950daa195a5b3028a3a364f0f5b70f8934f3cd7f8dfc6b15c40ce9d32931fb289b4ab370c587341aa26d59db21ddd0817b930e1ba02e6ba8346da984b807785850c8567e6ee7d3107cb97ba7d808144e811949d134292131b2317c47a5b74d6a2f29817a7c42144faf7e5cbb94270711a9cb94d8f2969828ff0318a4f5a3f26a5e321103239d61bd7fb9e48aa381e2b9369046329cc7f5bc6ec1e6744f6c6407d57f65914596d8593d7b8419ce1cfb3227c92e7ec60b93dd82135b68cc9a8ab2e5fb09fa67b586e04d73c1aae3419f91238bb83303147fda33375635f86f54a418e3006465dd7e5b7f6daf1344337badc5623330882a465aaec8c6ef247fe8e275ee1289d7b348ca80aa454eeaddb923706031e361a448a31f9d7ae8faa831963b09a44e905d7a9a84abde6bb1dee1aaa361e5dd87bba136575534f592fd78f0c97ea7d5fbb62a5ebe6092210dac002c3ba8c9dcd8eb9b3beac934ef587d436d36ff4a54e5c30230066a0249b74f2e0b487169b474392ec631120f240476ab20a3dd5a8979f1e6f4e95f22fa49c5dc1b7768c70a8ace353fb98cf347eb4a958add50506d7172fec68b6143b23f6c1c94fc2ddc5cb3be56962d056f8e379c88efc48dcf9c839d845fa2c1957741ec835a793159f76e967473553099c389f971437a9c58ed51e1a11348e79566aa540ab1ab8cbc31dda54bc0dc4a6050c7094f67b1673e3e73e57d782fea4ecd706c940baeb31ae0f85a98e3ef146e27981aaaa728fa1c9aaad72e3ddf21e6f6946b50580a87c987e41ec7d90022a1ba2860572f8219eb957309f3f08c1c7932930a9b8a2b25cddea2139bba11105fa1e45ed3a539d5c2143809143eef5fca3a9657f67851046ec84150e8c63ce04d3b7bb277b9560be23f4bb853d1238afd2101e4f826b3a1e90ab7e59a2b6292e3eaf1b21e3ce3cde735e25deea1e92524db4fff89269427218496a2b4a0f7f7b8e9698cc63bce8da8489ec80e061479b103b54eae22bb5966b2231bb67362cb768b1b3446e18c8a348d94c043e43d49cb4d557cb2a7e3b0cee5b557ae0fd52f5bd4c31e5be031111df1c8a5fe893c60543e7db24b7730dfd5f44a07b2ff9b7b530b57fb2f89f6b8ad82a68f4ad667a0bf516937abde22e12d2faf1aa161753557df65f91f793b0aec3f55527a4746af35e5eda41e1c91c55a73cfc964a2c9530bada27bfd01783dbf9581eade2c54666f4a8f9d8244056bb923c880bc23cc5a38b4d2d7fe3181f5530f25cbeb6d720b5bff0a6d6d2b2b4bd979faeceebb366870801e7ad5b1955b87d4b0e234588c04b3e196f1ee49e5adaac0117d89c96b1e147d48936cc015ee7c175798d2cb1b0a31703897881ead38322c81cd8e3f1813adc57a606f51f005e2d0a41a10afd295b5c040e74fce5a5384bf5bca000d613081a687faf78ff8342e4068a41e297128d19b30efb3581e0d6dc1b02f4c1b9e9bfe9bcaf6a20004f06c5991ce6755c120e294f7eb5598bb50a01c191af2a0070164494ada8b167a8bde8f11403dea490a9c023370aabaf5f74cb9d4a1235681b70ffcff3d1bcf83c003ce593d31848d18107c1a36879bb4832eb7f02adebd30c28df7553a34ab4e21f6540ae6be9b55b350cd20332ff8b94b8d371ded94fb9013c5746f519cef3516d15c73eeed7ad7bf9b138aa9f4f0e7632a29f85cac5568eba6a8407a97182fb7c1e2c935ac79192548bac54f0bbdc474b6bd78306f0fab5835bd22b040ee1a9f678dd4e5aeb1ca0534afaa728722f3e9009ac63e357342b670a7726f24239c4199671d3a6bf922960bd19611119ba729c8b4e31d5516212a124b18071b71d5b6560c99be2550955f9fa3da79195d696bb29f754831ca1137bbfdc93edcd212efee44dc6d0f2fe9d24eb9c5fd826ed7496183d6bf500319a4df6f109f50ebcc13f9056fd33a5fc6e5e57dbf3aa44c9f59c44dd61c3cdcffe013787739c08e446215c5473b01465df013f72f0108679c7b41a57eac5823c0bd92b6b63fbc6b03a58ae2999824dbaad609a3287d7e2eb49f8a9115e891b6cdd36d4d9f77bb7d3ea6f8bc14c67900bbd8362645c2beac83d8db8a63855968c341ea2b82c3708db32773dc8963add11af757301a8feb7c29f409526ac390e51a4a95431a80241c8e8bcdc18d0a96c17806a817a960b909d13701bad4a703d71737035464f2d1377a1341104dc5d8601062aa5ad2a015c8aa17e2d7da17ed4d7433251a0449cb19534c3c56b985f8045fd6f80ce518fd273597af3a0eec6a70507b78c6a4bd7d8aa2f599ca37f4e8d13beb30005ec3e76ee939e5a934bbfed8fbb571b064514aa94d0bb3560c3d61fe0de2750b53ccc27bdef47e3ee039db1847c2495ed1ba2782f36b0a52f5ac96a12e6cbfd63750eaa252406f6f93cceeb682aac2f8d0343cf1eeb85de3de576d2eceee5f7784171360006d6ef8e6f373b9c339cf9b508a7e0cce8a3ce6612210bf2c141f0a6ea2bc39d9306e91ba1e5f3de4d07bb691a77f20830b408d41584e7894b55e2ffd1f811b7fb8b5b61e295fffbd2eaee8824078d8b19329cae071101d0c6ff1d8a370b0a5bc30d0c950acd583c8561fcd0b238e30681195c7bd78d9a752a8d2df8c8b6ccef263d70294ff094acad08e7a7c194c8968cf0ecc647ad59d066c5d1ee7c65924a46baa8ce78d0b0a0b4e3648077a45bd253f467f576a1c84388b695c398dbea4050f9b28ae4e078335b9e04e4a30aed56bcd495a9bef69c4ea867c0f4c5418fecc54fed10245bfa0460ddbd065883cb6c64b55cf32ce1cb59c781882337480dc5bb2f633f01b245d0ee256d6a1449567d21622a623e839d1b9d730fe9c68e20a88002fab82c945e16ccedac54a2b0dcfdf5422f839eef9fa03fe8394241fc623b01d9c6665e30f1c5bf1f2ed97a88ccfc27874da7c972a1bc7e344e4bb40ed0ca19d1d8d5049e9d36ee68b749c240e73cd300d5a2cfe8df07b1f863a5cf69fb8246174009b5e6de3e1e7fbfd5fb0a7fb5ab025541d2bb0714172e827db25131dc06a79d3636841ecd409c0b211c8fdd347f58bf842cffd2b7ca59918e82d32ffd50817109744a780c75da56d95f49701e0416654bea652676a3dc6c5674757d47d1af75837065fca30535d20ccc9debbe4562f26c5eb26eb9b761e2aa45cf725f0abe48a8b21a7086b1e287cd37e2ddde80f0902716219223f83edba9363b0746c404512e00ef08193f33602a8c3ebd57582532558296a744e1c95022634cd60003ec3b6c528958ca4d6e753d86111b4dc1df17acdc301cdfaab797704bb189d2d21615bcdf050ed55977ea56f294dab86ee738ebf60f915f77df0fa27585dd7b43bd1c7788c3c72c0f6c627d1cc1722b374fec558d9c6f2994017f91cd0cc17a40076438d7d2b6d9fe06b7a6853fdd4a0ea356a5473854e4cc5d27432d27eba0418cedca51843b5719c62a43c765dab016acfc49960ec0a399a2d21f902c39975c753fb43b7e11d37e8b832eeb3c0c0a38bd76bc30c9356268d7244f715ee83279ed306b3d0f52239c1ce2594ea1a1c65371b4be4a7b5df93c46a620a821222dd8337b74078f55eec2fd237eb42492c31a5aae0f249c3eb1810028256c1b2b83a6453657b07c9b08229ecfa9a52eb83ab560df684d1de31f4bd692ad8694d6d67d241f185e22000b051721abbaa12faa35fd7954407c20ac486961b1e5133c5abb68a0647f54255d4c2433b1535182d3bd7340ba662864061549afa3797efc7305fdb54a857e612f48c3daf91a9908e9018dae2eaa788f350e4d516bb4560af71be7785a44e56f434d83a6e9831464bea1172ebdb2308cec4f7c6bfaadc2e820c756b6b22f744ddf235977cd290fe1e59ab2b6127042922902000936801c1913b2d5f3ad414f9676ff74f940df4e92688b39725d6a0fc71c7d2dab642d7d9ef247c57a2809c287d2d3931f0569194026443d7e65d92d05f8cb2e5397f4326c63738fdd1e75204044e7530df5c358da70e598b295091f36536904481478188ec3f9fe089282bea39402d3a4c98f637257c70d4b3639f146f84ae1c158e7c1e7f3af862b7944499560e0a894edefa36a9480eebd22fb279906269d4697fe295186bff8df9244bef2b2758b8736b495ccbd531caa927aa25e0ce6e03326aba36cdbff17498d33b84ee9adf9a444008f0f78de54d36f69d545e7235d251c6f6190a77bbd8eb780795d9c58b2f988bb1fee1f6fb3ac434e9f9ee1e0a2ea45daeb8a21ecfeea8de5271c912fb9a78e755d6728b7087b3be5963463d426b82667caefd4f47903c3e1a566e0e2a87172ca072db59f440e1037ca662174a6b2b032a2b19c9b83f2b9e3eb0183844e5d3ed4013ca420e94b0ee7aa83a81b0ba37e54ab8b545e1603f0a45b42d36f4b5e96b61adee234aebd520ddfb7e0daa8f34debb2914a8a428253c58edf08f56d5f757d7985014d5d95501582fa176108ce00091a2710dab7456e9f962fbba4f546ebc6b76407e69f612cb027dd3e8807380dca8b6b4ae1723508b57bae6324088bedc8da4da1d9786c8a0a546596520eaa8a573ceacbe17fb852c48e32920b570f786df2344d1abc78f4dfe57f73e508557307b793f31d25fe32c1b0cee7a4bb9c05dee2d48caf9a2c9405745d2bdf81255be5805483103062bf2155d981e67b103b3bcb8890eb2236b5f46e91b65d4ea21f35b228f50c55f63e8584a98a7aec73dcbf13874b4e519663fc761403848d85dd5bed15ef7a14968c5d7e21821d144b82cde713168dd0736eff6c77c0011bb08b14540d26a7afd7c71594b28b73faae5d662bd8d58809a75b80cb87ab37490454a7eadcf8912b7b0a7156c6e16b6efe9159e48b0da98d4c4e8dd6e998bfed0abf04547a5d05ef31e3ea54bbe0112cd0c8713de232582da86ffafb73f844e56072afafcefd2704f1b0d3a0b5453fe6fc992dc1d16bb99fa1b47a5d95582f51ee0ea2be78f446f94fbcb2d197f5fe6c3e0a09d475e610c7b878d51fbcb5c7d8e148a84bbed4a3f828604d545d0a2483c525ebf4f933d7e39fcc94673cfddf0c977f9ccb73044d79dab72f520bea6857d75d3e23d298a9b89845dd23668a2c65314dc84a35734a39df7b8a190744bd2b1cfa3bc215ccf7f6507c2392e1f5a9d53bb34cbcbb078f90945513664d5a68728d7a934209ac6ab6c00e917cb6263126aae0ff18c874597ac28b47824e0bf99487d856e48efde2dd3963b5f4fee2ec0eed523de438e923ac7df1a9d0a959e41e84c0dae336af0bc3423fc3a23496880579bc7a03886d75da806efeda046965a4", 0x1011, 0x827}, {&(0x7f0000000000)="32ceb7164e0ee7", 0x7, 0x8001}], 0x0, &(0x7f0000000500)=ANY=[], 0x0) (async) symlinkat(&(0x7f0000002940)='./file0\x00', r0, &(0x7f0000001900)='./file1\x00') (async) open(&(0x7f0000000100)='./file0\x00', 0x200000, 0x0) (async) 04:07:30 executing program 2: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_USER_CONFIRM_NEG_REPLY={{}, 0x3}}}, 0x7) 04:07:30 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x400448dd, 0xfffffffffffffffd) [ 652.541636][ T3694] usb 2-1: USB disconnect, device number 86 [ 652.552669][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored 04:07:30 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time_recursive\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001400)={&(0x7f00000013c0)='workqueue_execute_start\x00'}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r1, 0xff, 0x0, 0x0, 0x0) syncfs(r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r2, &(0x7f0000000000), 0x20b000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000200)='illinois\x00', 0x9) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000000)=0x2805, 0x4) r4 = openat(0xffffffffffffffff, &(0x7f00000002c0)='/proc/self/exe\x00', 0x0, 0x5) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000280)={0x0, &(0x7f00000001c0)}, 0x10) close(0xffffffffffffffff) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e20, @loopback}, 0x10) sendfile(r3, r4, 0x0, 0x90000) recvmsg(r3, &(0x7f0000000580)={0x0, 0x41, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4084, 0xfffffe1f}], 0x6, 0x0, 0xfffffffffffffcc9}, 0x700) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time_recursive\x00', 0x26e1, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001400)={&(0x7f00000013c0)='workqueue_execute_start\x00'}, 0x10) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) getsockopt(r1, 0xff, 0x0, 0x0, 0x0) (async) syncfs(r1) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async) write$cgroup_type(r2, &(0x7f0000000000), 0x20b000) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000200)='illinois\x00', 0x9) (async) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10) (async) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000000)=0x2805, 0x4) (async) openat(0xffffffffffffffff, &(0x7f00000002c0)='/proc/self/exe\x00', 0x0, 0x5) (async) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000280)={0x0, &(0x7f00000001c0)}, 0x10) (async) close(0xffffffffffffffff) (async) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e20, @loopback}, 0x10) (async) sendfile(r3, r4, 0x0, 0x90000) (async) recvmsg(r3, &(0x7f0000000580)={0x0, 0x41, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4084, 0xfffffe1f}], 0x6, 0x0, 0xfffffffffffffcc9}, 0x700) (async) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, 0x0) (async) 04:07:30 executing program 2: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080), 0x759300, 0x0) ioctl$SIOCGETVIFCNT(r0, 0x89e0, &(0x7f00000000c0)={0xffffffffffffffff}) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0xfffffff9}}}, 0xd) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0x192, 0x1}, '5'}, 0x5) 04:07:30 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x400454ca, 0xfffffffffffffffd) 04:07:30 executing program 2: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080), 0x759300, 0x0) ioctl$SIOCGETVIFCNT(r0, 0x89e0, &(0x7f00000000c0)={0xffffffffffffffff}) (async, rerun: 32) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0xfffffff9}}}, 0xd) (rerun: 32) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0x192, 0x1}, '5'}, 0x5) [ 652.581550][T12330] loop3: detected capacity change from 0 to 128 [ 652.604285][T12330] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop3. [ 652.659454][T12330] loop3: detected capacity change from 0 to 128 [ 652.685121][T12330] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop3. 04:07:30 executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000007c0)=ANY=[@ANYBLOB="1201000079201010c2154000f3800102030109021b0001000000000904000001e104550009058b0b40"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x300000000000000) 04:07:30 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time_recursive\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001400)={&(0x7f00000013c0)='ext4_es_find_extent_range_enter\x00'}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r1, 0xff, 0x0, 0x0, 0x0) syncfs(r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r2, &(0x7f0000000000), 0x20b000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000000c0)='illinois\x00', 0x9) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000000)=0x2805, 0x4) r4 = openat(0xffffffffffffffff, &(0x7f00000002c0)='/proc/self/exe\x00', 0x0, 0x5) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000280)={0x0, &(0x7f00000001c0)}, 0x10) close(0xffffffffffffffff) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x65) sendfile(r3, r4, 0x0, 0x90000) recvmsg(r3, &(0x7f0000000580)={0x0, 0x41, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4084, 0xfffffe1f}], 0x6, 0x0, 0xfffffffffffffcc9}, 0x700) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, 0x0) 04:07:30 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40049409, 0xfffffffffffffffd) [ 652.754381][ T3690] usb 5-1: USB disconnect, device number 69 [ 652.982907][ T3694] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 653.172836][ T3690] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 653.222695][ T3694] usb 2-1: Using ep0 maxpacket: 16 [ 653.342778][ T3694] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 653.444285][ T3690] usb 5-1: Using ep0 maxpacket: 16 [ 653.512881][ T3694] usb 2-1: New USB device found, idVendor=15c2, idProduct=0040, bcdDevice=80.f3 [ 653.522154][ T3694] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 653.535787][ T3694] usb 2-1: Product: syz [ 653.539962][ T3694] usb 2-1: Manufacturer: syz [ 653.544710][ T3694] usb 2-1: SerialNumber: syz [ 653.552475][ T3694] usb 2-1: config 0 descriptor?? [ 653.582879][ T3690] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 653.599920][ T3694] input: iMON Panel, Knob and Mouse(15c2:0040) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input253 [ 653.763006][ T3690] usb 5-1: New USB device found, idVendor=15c2, idProduct=0040, bcdDevice=80.f3 [ 653.772272][ T3690] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 653.780817][ T3690] usb 5-1: Product: syz [ 653.785536][ T3690] usb 5-1: Manufacturer: syz [ 653.790151][ T3690] usb 5-1: SerialNumber: syz [ 653.797936][ T3690] usb 5-1: config 0 descriptor?? [ 653.846110][ T3690] input: iMON Panel, Knob and Mouse(15c2:0040) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input255 [ 653.892917][ T3694] rc_core: IR keymap rc-imon-pad not found [ 653.899082][ T3694] Registered IR keymap rc-empty [ 653.904244][ T3694] imon 2-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 653.914686][ T3694] imon 2-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 653.973447][ T3694] rc rc0: iMON Remote (15c2:0040) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 653.985119][ T3694] input: iMON Remote (15c2:0040) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input254 [ 653.998989][ T3694] imon 2-1:0.0: iMON device (15c2:0040, intf0) on usb<2:87> initialized [ 654.142882][ T3690] rc_core: IR keymap rc-imon-pad not found [ 654.148915][ T3690] Registered IR keymap rc-empty [ 654.159040][ T3690] imon 5-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 654.169357][ T3690] imon 5-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 654.294833][ T3690] rc rc1: iMON Remote (15c2:0040) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc1 [ 654.305733][ T3690] input: iMON Remote (15c2:0040) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc1/input256 [ 654.318940][ T3690] imon 5-1:0.0: iMON device (15c2:0040, intf0) on usb<5:70> initialized [ 654.485869][ T3694] usb 5-1: USB disconnect, device number 70 04:07:33 executing program 1: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000007c0)=ANY=[@ANYBLOB="1201000079201010c2154000f3800102030109021b0001000000000904000001e104550009058b0b40"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io(r0, &(0x7f0000000200)={0x2c, &(0x7f0000000000)={0x0, 0x22, 0x5f, {0x5f, 0xc, "af18da9f3a80a30c9b27db7752870ddf348dcf06d596814a735064898926c74f5b7c01f39d950ed79fd556b7c14813d21cdcf7c539b6e13152369993560b307f44d56922a619b0917e38f0091db48397d43140aaf7dc224ab50eda6b0c"}}, &(0x7f0000000080)={0x0, 0x3, 0x3d, @string={0x3d, 0x3, "7c5bdbd99b74834596a0286e1b5931cc85e374b18f10200ecfbad30411f8176dbbc0fdc5c27a65f66d30ef806d2a0c7c52b867bfbc4397a00c0d6f"}}, &(0x7f0000000100)={0x0, 0xf, 0x5d, {0x5, 0xf, 0x5d, 0x6, [@wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x1f, 0xba, 0x40, 0x5}, @ext_cap={0x7, 0x10, 0x2, 0x1e, 0xf, 0xa, 0x7}, @wireless={0xb, 0x10, 0x1, 0xc, 0xa8, 0x1, 0x20, 0x8, 0x39}, @wireless={0xb, 0x10, 0x1, 0x4, 0x0, 0x20, 0x7, 0x3, 0xf8}, @ssp_cap={0x1c, 0x10, 0xa, 0x6e, 0x4, 0x1, 0xff00, 0x35dc, [0xc0, 0xff3f30, 0xc000, 0x3f00]}, @ssp_cap={0x14, 0x10, 0xa, 0x1, 0x2, 0x0, 0xff0f, 0x4, [0x3fc0, 0xc0]}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x98, 0xfd, 0x2, "fd87f8bb", "bcaac8e2"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x1, 0x1e, 0xf7, 0x80, 0x80}}}, &(0x7f0000000680)={0x84, &(0x7f0000000240)={0x20, 0x1, 0x59, "022325cf9ed26ee8872912177ad30087116dc5cfe2c01dd190a5a3557889dc1d69a2bafce53edb39081004d9750a3768110e8c984ae9ba5624a1103867bfae40d91e1925cce789ead8e1a474c84be7730267d994318e834470"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x1f}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000340)={0x20, 0x0, 0x4, {0x7, 0x1}}, &(0x7f0000000380)={0x20, 0x0, 0x8, {0x1c00, 0x1, [0xf000]}}, &(0x7f00000003c0)={0x40, 0x7, 0x2, 0x7fff}, &(0x7f0000000400)={0x40, 0x9, 0x1, 0x3f}, &(0x7f0000000440)={0x40, 0xb, 0x2, "b021"}, &(0x7f0000000480)={0x40, 0xf, 0x2, 0x800}, &(0x7f00000004c0)={0x40, 0x13, 0x6, @random="6f600312a935"}, &(0x7f0000000500)={0x40, 0x17, 0x6, @local}, &(0x7f0000000540)={0x40, 0x19, 0x2, "340f"}, &(0x7f0000000580)={0x40, 0x1a, 0x2, 0x9}, &(0x7f00000005c0)={0x40, 0x1c, 0x1, 0x5}, &(0x7f0000000600)={0x40, 0x1e, 0x1, 0xff}, &(0x7f0000000640)={0x40, 0x21, 0x1, 0x4}}) (async) write$char_usb(r1, 0x0, 0x0) 04:07:33 executing program 2: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080), 0x759300, 0x0) ioctl$SIOCGETVIFCNT(r0, 0x89e0, &(0x7f00000000c0)={0xffffffffffffffff}) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0xfffffff9}}}, 0xd) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0x192, 0x1}, '5'}, 0x5) 04:07:33 executing program 3: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="10000000000001000100050000000000ffffff7f200000005a4d", 0x1a, 0x400}, {&(0x7f0000000440)="ff00feffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff00ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff03f0ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffe1ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed41034844d6de4005", 0x809, 0x800}, {0x0, 0x0, 0x1400}], 0x0, &(0x7f0000000500)=ANY=[], 0x0) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x84, 0x0, 0x8, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x26}}}}, [@NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x6}, @NL80211_ATTR_STA_WME={0x2c, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x81}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x75}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0xbe}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x6}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0xe1}]}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x8, 0xbd, [0x8, 0x10]}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0xffff}, @NL80211_ATTR_STA_FLAGS={0x8, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_WME={0x4}]}, @NL80211_ATTR_REASON_CODE={0x6}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x629}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x47d}]}, 0x84}, 0x1, 0x0, 0x0, 0xc014}, 0x20000000) 04:07:33 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0xfffffffffffffffd) 04:07:33 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time_recursive\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001400)={&(0x7f00000013c0)='ext4_es_find_extent_range_enter\x00'}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r1, 0xff, 0x0, 0x0, 0x0) syncfs(r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r2, &(0x7f0000000000), 0x20b000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000000c0)='illinois\x00', 0x9) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000000)=0x2805, 0x4) r4 = openat(0xffffffffffffffff, &(0x7f00000002c0)='/proc/self/exe\x00', 0x0, 0x5) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000280)={0x0, &(0x7f00000001c0)}, 0x10) close(0xffffffffffffffff) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x65) sendfile(r3, r4, 0x0, 0x90000) recvmsg(r3, &(0x7f0000000580)={0x0, 0x41, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4084, 0xfffffe1f}], 0x6, 0x0, 0xfffffffffffffcc9}, 0x700) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time_recursive\x00', 0x26e1, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001400)={&(0x7f00000013c0)='ext4_es_find_extent_range_enter\x00'}, 0x10) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) getsockopt(r1, 0xff, 0x0, 0x0, 0x0) (async) syncfs(r1) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async) write$cgroup_type(r2, &(0x7f0000000000), 0x20b000) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000000c0)='illinois\x00', 0x9) (async) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10) (async) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000000)=0x2805, 0x4) (async) openat(0xffffffffffffffff, &(0x7f00000002c0)='/proc/self/exe\x00', 0x0, 0x5) (async) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000280)={0x0, &(0x7f00000001c0)}, 0x10) (async) close(0xffffffffffffffff) (async) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x65) (async) sendfile(r3, r4, 0x0, 0x90000) (async) recvmsg(r3, &(0x7f0000000580)={0x0, 0x41, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4084, 0xfffffe1f}], 0x6, 0x0, 0xfffffffffffffcc9}, 0x700) (async) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, 0x0) (async) 04:07:33 executing program 4: r0 = syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="10000000000001000100050000000000ffffff7f200000005a4d", 0x1a, 0x400}, {&(0x7f0000000440)="ff00feffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff00ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff03f0ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffe1ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed41034844d6de4005", 0x809, 0x800}, {0x0, 0x0, 0x1400}], 0x0, &(0x7f0000000500)=ANY=[], 0x0) symlinkat(&(0x7f0000002940)='./file0\x00', r0, &(0x7f0000001900)='./file1\x00') readv(r0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/1, 0x1}], 0x1) 04:07:33 executing program 2: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e0411c037cd"], 0x7) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) [ 655.617353][ T3694] usb 2-1: USB disconnect, device number 87 [ 655.632674][ C0] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 655.649750][T12360] loop4: detected capacity change from 0 to 20 [ 655.652776][T12361] loop3: detected capacity change from 0 to 20 04:07:33 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time_recursive\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001400)={&(0x7f00000013c0)='ext4_es_find_extent_range_enter\x00'}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r1, 0xff, 0x0, 0x0, 0x0) syncfs(r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r2, &(0x7f0000000000), 0x20b000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000200)='illinois\x00', 0x9) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000000)=0x2805, 0x4) r4 = openat(0xffffffffffffffff, &(0x7f00000002c0)='/proc/self/exe\x00', 0x0, 0x5) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000280)={0x0, &(0x7f00000001c0)}, 0x10) close(0xffffffffffffffff) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e20, @loopback}, 0x10) sendfile(r3, r4, 0x0, 0x90000) recvmsg(r3, &(0x7f0000000580)={0x0, 0x41, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4084, 0xfffffe1f}], 0x6, 0x0, 0xfffffffffffffcc9}, 0x700) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, 0x0) 04:07:33 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40186366, 0xfffffffffffffffd) 04:07:33 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time_recursive\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001400)={&(0x7f00000013c0)='ext4_es_find_extent_range_enter\x00'}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r1, 0xff, 0x0, 0x0, 0x0) syncfs(r1) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r2, &(0x7f0000000000), 0x20b000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000000c0)='illinois\x00', 0x9) (async, rerun: 64) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10) (async, rerun: 64) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000000)=0x2805, 0x4) (async) r4 = openat(0xffffffffffffffff, &(0x7f00000002c0)='/proc/self/exe\x00', 0x0, 0x5) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000280)={0x0, &(0x7f00000001c0)}, 0x10) (async) close(0xffffffffffffffff) (async) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x65) (async) sendfile(r3, r4, 0x0, 0x90000) (async) recvmsg(r3, &(0x7f0000000580)={0x0, 0x41, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4084, 0xfffffe1f}], 0x6, 0x0, 0xfffffffffffffcc9}, 0x700) (async) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, 0x0) 04:07:33 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x401c5820, 0xfffffffffffffffd) 04:07:33 executing program 3: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="10000000000001000100050000000000ffffff7f200000005a4d", 0x1a, 0x400}, {&(0x7f0000000440)="ff00feffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff00ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff03f0ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffe1ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed41034844d6de4005", 0x809, 0x800}, {0x0, 0x0, 0x1400}], 0x0, &(0x7f0000000500)=ANY=[], 0x0) (async) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x84, 0x0, 0x8, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x26}}}}, [@NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x6}, @NL80211_ATTR_STA_WME={0x2c, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x81}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x75}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0xbe}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x6}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0xe1}]}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x8, 0xbd, [0x8, 0x10]}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0xffff}, @NL80211_ATTR_STA_FLAGS={0x8, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_WME={0x4}]}, @NL80211_ATTR_REASON_CODE={0x6}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x629}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x47d}]}, 0x84}, 0x1, 0x0, 0x0, 0xc014}, 0x20000000) [ 655.745216][ T12] kworker/u4:1: attempt to access beyond end of device [ 655.745216][ T12] loop4: rw=1, sector=44, nr_sectors = 2 limit=20 [ 655.777472][ T12] Buffer I/O error on dev loop4, logical block 22, lost async page write [ 655.808087][ T12] kworker/u4:1: attempt to access beyond end of device [ 655.808087][ T12] loop4: rw=1, sector=46, nr_sectors = 2 limit=20 [ 655.866682][ T12] Buffer I/O error on dev loop4, logical block 23, lost async page write [ 655.880380][T12380] loop3: detected capacity change from 0 to 20 [ 656.092741][ T3694] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 656.332691][ T3694] usb 2-1: Using ep0 maxpacket: 16 [ 656.453047][ T3694] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 656.622963][ T3694] usb 2-1: New USB device found, idVendor=15c2, idProduct=0040, bcdDevice=80.f3 [ 656.632101][ T3694] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 656.646264][ T3694] usb 2-1: Product: syz [ 656.650442][ T3694] usb 2-1: Manufacturer: syz [ 656.656820][ T3694] usb 2-1: SerialNumber: syz [ 656.666458][ T3694] usb 2-1: config 0 descriptor?? [ 656.707796][ T3694] input: iMON Panel, Knob and Mouse(15c2:0040) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input257 [ 656.992993][ T3694] rc_core: IR keymap rc-imon-pad not found [ 656.998970][ T3694] Registered IR keymap rc-empty [ 657.004279][ T3694] imon 2-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 657.014572][ T3694] imon 2-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 657.083143][ T3694] rc rc0: iMON Remote (15c2:0040) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 657.094748][ T3694] input: iMON Remote (15c2:0040) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input258 [ 657.108107][ T3694] imon 2-1:0.0: iMON device (15c2:0040, intf0) on usb<2:88> initialized [ 657.256192][T12387] imon:vfd_write: invalid payload size 04:07:36 executing program 1: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000079201010c2154000f3800102030109021b00010000dbaa1163c7a88f4c04550009058b0b40ac6f40322989bc5046c05c80420370880eb94e73afeb308032d5018b70438ea945a01ee4ce36287894dc0f474d6845a41f59166d7587efdf4835e990d32bda119efc280eec95786acbfc367e6d2db201661598a4a83839ec5423bdfc2f472e95e5c3bf9f82c6ff"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) 04:07:36 executing program 2: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e0411c037cd"], 0x7) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) 04:07:36 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x4020940d, 0xfffffffffffffffd) 04:07:36 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time_recursive\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff75}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001400)={&(0x7f00000013c0)='ext4_es_find_extent_range_enter\x00'}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r1, 0xff, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000340)='hugetlb.2MB.usage_in_bytes\x00', 0x7a05, 0x1700) write$cgroup_type(r2, &(0x7f0000000000), 0x20b000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000200)='illinois\x00', 0x9) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0xfffffffffffffbff, 0x1, 0x8000000000000000, 0x47}) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000000)=0x2805, 0x4) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file0/file0/file0\x00', 0x301001, 0x195) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000280)={0x5, &(0x7f0000000140)=[{0x2818, 0x3, 0x2, 0x7ff}, {0x2, 0x6a, 0x2, 0x3}, {0x6, 0x6, 0x6d, 0x7f}, {0x7, 0x8, 0x4, 0xfe6a}, {0x5, 0x3, 0x1, 0x1f}]}, 0x10) r4 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x4040, 0x0) close(r4) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e20, @loopback}, 0x10) recvmsg(r3, &(0x7f0000000400)={0x0, 0xfffffffffffffc54, &(0x7f0000000440)=[{&(0x7f0000000480)=""/146}], 0x14c8f3ceb67afdc9, 0x0, 0x11}, 0x40000010) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, 0x0) 04:07:36 executing program 3: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="10000000000001000100050000000000ffffff7f200000005a4d", 0x1a, 0x400}, {&(0x7f0000000440)="ff00feffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff00ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff03f0ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffe1ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed41034844d6de4005", 0x809, 0x800}, {0x0, 0x0, 0x1400}], 0x0, &(0x7f0000000500)=ANY=[], 0x0) (async) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x84, 0x0, 0x8, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x26}}}}, [@NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x6}, @NL80211_ATTR_STA_WME={0x2c, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x81}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x75}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0xbe}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x6}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0xe1}]}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x8, 0xbd, [0x8, 0x10]}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0xffff}, @NL80211_ATTR_STA_FLAGS={0x8, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_WME={0x4}]}, @NL80211_ATTR_REASON_CODE={0x6}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x629}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x47d}]}, 0x84}, 0x1, 0x0, 0x0, 0xc014}, 0x20000000) 04:07:36 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40186366, 0xfffffffffffffffd) [ 658.731539][ T3694] usb 2-1: USB disconnect, device number 88 [ 658.742676][ C0] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored 04:07:36 executing program 2: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e0411c037cd"], 0x7) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) 04:07:36 executing program 2: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e040900"], 0x7) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0x1, 0x1, 0x0, 0x4}}, 0x9) syz_emit_vhci(&(0x7f0000000100)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x0, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_conn_rsp={{0x3, 0xfc, 0x8}, {0xfff, 0x101, 0x7ff, 0x5}}]}}, 0x15) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "9fa35c", 0x2}}}, 0xd) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) 04:07:36 executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000007c0)=ANY=[@ANYBLOB="1201000079201010c2154000f3800102030109021b0001000000000904000001e104550009058b0b40"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x7a000000) 04:07:36 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x80086301, 0xfffffffffffffffd) 04:07:36 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time_recursive\x00', 0x26e1, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff75}, 0x80) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001400)={&(0x7f00000013c0)='ext4_es_find_extent_range_enter\x00'}, 0x10) (async) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r1, 0xff, 0x0, 0x0, 0x0) (async) r2 = openat$cgroup_ro(r0, &(0x7f0000000340)='hugetlb.2MB.usage_in_bytes\x00', 0x7a05, 0x1700) write$cgroup_type(r2, &(0x7f0000000000), 0x20b000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000200)='illinois\x00', 0x9) (async) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0xfffffffffffffbff, 0x1, 0x8000000000000000, 0x47}) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000000)=0x2805, 0x4) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file0/file0/file0\x00', 0x301001, 0x195) (async) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000280)={0x5, &(0x7f0000000140)=[{0x2818, 0x3, 0x2, 0x7ff}, {0x2, 0x6a, 0x2, 0x3}, {0x6, 0x6, 0x6d, 0x7f}, {0x7, 0x8, 0x4, 0xfe6a}, {0x5, 0x3, 0x1, 0x1f}]}, 0x10) (async) r4 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x4040, 0x0) close(r4) (async) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e20, @loopback}, 0x10) recvmsg(r3, &(0x7f0000000400)={0x0, 0xfffffffffffffc54, &(0x7f0000000440)=[{&(0x7f0000000480)=""/146}], 0x14c8f3ceb67afdc9, 0x0, 0x11}, 0x40000010) (async) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, 0x0) [ 658.788306][T12397] loop3: detected capacity change from 0 to 20 [ 658.808411][ T27] audit: type=1800 audit(1664078856.243:381): pid=12394 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name=".pending_reads" dev="sda1" ino=1166 res=0 errno=0 04:07:36 executing program 3: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x4040, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r0, 0xc0185879, &(0x7f0000000040)={@id={0x2, 0x0, @auto="001006040000000f00000400"}}) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x4040, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r1, 0xc0185879, &(0x7f0000000040)={@id={0x2, 0x0, @auto="001006040000000f00000400"}}) r2 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x4040, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r2, 0xc0185879, &(0x7f0000000040)={@id={0x2, 0x0, @auto="001006040000000f00000400"}}) r3 = syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="10000000000001000100050000000000ffffff7f200000005a4d", 0x1a, 0x400}, {&(0x7f0000000440)="ff00feffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff00ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff03f0ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffe1ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed41034844d6de4005", 0x809, 0x800}, {0x0, 0x0, 0x1400}], 0x0, &(0x7f0000000280)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRESOCT=r0, @ANYRESDEC=r0, @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="0741a237fe95b3f9473e827c86aeb2c91f5db3e16a857cced135a569a100bec240301cf67dd1d0d1a1", @ANYRES32, @ANYRESHEX=r2], 0x0) symlinkat(&(0x7f0000002940)='./file0\x00', r3, &(0x7f0000001900)='./file1\x00') [ 658.952005][ T27] audit: type=1800 audit(1664078856.383:382): pid=12418 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=".pending_reads" dev="sda1" ino=1177 res=0 errno=0 [ 658.988941][T12418] loop3: detected capacity change from 0 to 20 [ 659.003736][ T27] audit: type=1800 audit(1664078856.423:383): pid=12418 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=".pending_reads" dev="sda1" ino=1177 res=0 errno=0 [ 659.050877][ T2432] kworker/u4:5: attempt to access beyond end of device [ 659.050877][ T2432] loop3: rw=1, sector=44, nr_sectors = 2 limit=20 [ 659.059066][ T27] audit: type=1800 audit(1664078856.423:384): pid=12418 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=".pending_reads" dev="sda1" ino=1177 res=0 errno=0 [ 659.064538][ T2432] Buffer I/O error on dev loop3, logical block 22, lost async page write [ 659.102511][ T2432] kworker/u4:5: attempt to access beyond end of device [ 659.102511][ T2432] loop3: rw=1, sector=46, nr_sectors = 2 limit=20 [ 659.140519][ T2432] Buffer I/O error on dev loop3, logical block 23, lost async page write [ 659.194705][ T3691] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 659.242735][ T3694] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 659.462800][ T3691] usb 5-1: Using ep0 maxpacket: 16 [ 659.482955][ T3694] usb 2-1: Using ep0 maxpacket: 16 [ 659.593112][ T3691] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 659.602795][ T3694] usb 2-1: config 0 descriptor has 1 excess byte, ignoring [ 659.611292][ T3694] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 659.773049][ T3694] usb 2-1: New USB device found, idVendor=15c2, idProduct=0040, bcdDevice=80.f3 [ 659.782243][ T3694] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 659.790488][ T3694] usb 2-1: Product: syz [ 659.794679][ T3694] usb 2-1: Manufacturer: syz [ 659.799290][ T3694] usb 2-1: SerialNumber: syz [ 659.802804][ T3691] usb 5-1: New USB device found, idVendor=15c2, idProduct=0040, bcdDevice=80.f3 [ 659.811788][ T3694] usb 2-1: config 0 descriptor?? [ 659.813134][ T3691] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 659.826326][ T3691] usb 5-1: Product: syz [ 659.830494][ T3691] usb 5-1: Manufacturer: syz [ 659.835481][ T3691] usb 5-1: SerialNumber: syz [ 659.841428][ T3691] usb 5-1: config 0 descriptor?? [ 659.895363][ T3691] input: iMON Panel, Knob and Mouse(15c2:0040) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input259 [ 660.182937][ T3691] rc_core: IR keymap rc-imon-pad not found [ 660.188890][ T3691] Registered IR keymap rc-empty [ 660.193925][ T3691] imon 5-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 660.204487][ T3691] imon 5-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 660.354465][ T3691] rc rc0: iMON Remote (15c2:0040) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 660.368001][ T3691] input: iMON Remote (15c2:0040) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input260 [ 660.381987][ T3691] imon 5-1:0.0: iMON device (15c2:0040, intf0) on usb<5:71> initialized [ 660.540988][T12414] imon:vfd_write: invalid payload size [ 660.549383][ T3694] usb 5-1: USB disconnect, device number 71 [ 660.552657][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored 04:07:39 executing program 1: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000079201010c2154000f3800102030109021b00010000dbaa1163c7a88f4c04550009058b0b40ac6f40322989bc5046c05c80420370880eb94e73afeb308032d5018b70438ea945a01ee4ce36287894dc0f474d6845a41f59166d7587efdf4835e990d32bda119efc280eec95786acbfc367e6d2db201661598a4a83839ec5423bdfc2f472e95e5c3bf9f82c6ff"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) 04:07:39 executing program 2: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e040900"], 0x7) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0x1, 0x1, 0x0, 0x4}}, 0x9) syz_emit_vhci(&(0x7f0000000100)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x0, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_conn_rsp={{0x3, 0xfc, 0x8}, {0xfff, 0x101, 0x7ff, 0x5}}]}}, 0x15) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "9fa35c", 0x2}}}, 0xd) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e040900"], 0x7) (async) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0x1, 0x1, 0x0, 0x4}}, 0x9) (async) syz_emit_vhci(&(0x7f0000000100)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x0, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_conn_rsp={{0x3, 0xfc, 0x8}, {0xfff, 0x101, 0x7ff, 0x5}}]}}, 0x15) (async) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "9fa35c", 0x2}}}, 0xd) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) (async) 04:07:39 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x80086601, 0xfffffffffffffffd) 04:07:39 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time_recursive\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff75}, 0x80) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001400)={&(0x7f00000013c0)='ext4_es_find_extent_range_enter\x00'}, 0x10) (async) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r1, 0xff, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000340)='hugetlb.2MB.usage_in_bytes\x00', 0x7a05, 0x1700) write$cgroup_type(r2, &(0x7f0000000000), 0x20b000) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000200)='illinois\x00', 0x9) (async) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0xfffffffffffffbff, 0x1, 0x8000000000000000, 0x47}) (async) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000000)=0x2805, 0x4) (async) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file0/file0/file0\x00', 0x301001, 0x195) (async) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000280)={0x5, &(0x7f0000000140)=[{0x2818, 0x3, 0x2, 0x7ff}, {0x2, 0x6a, 0x2, 0x3}, {0x6, 0x6, 0x6d, 0x7f}, {0x7, 0x8, 0x4, 0xfe6a}, {0x5, 0x3, 0x1, 0x1f}]}, 0x10) (async) r4 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x4040, 0x0) close(r4) (async) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e20, @loopback}, 0x10) (async, rerun: 32) recvmsg(r3, &(0x7f0000000400)={0x0, 0xfffffffffffffc54, &(0x7f0000000440)=[{&(0x7f0000000480)=""/146}], 0x14c8f3ceb67afdc9, 0x0, 0x11}, 0x40000010) (async, rerun: 32) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, 0x0) 04:07:39 executing program 3: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x4040, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r0, 0xc0185879, &(0x7f0000000040)={@id={0x2, 0x0, @auto="001006040000000f00000400"}}) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x4040, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r1, 0xc0185879, &(0x7f0000000040)={@id={0x2, 0x0, @auto="001006040000000f00000400"}}) r2 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x4040, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r2, 0xc0185879, &(0x7f0000000040)={@id={0x2, 0x0, @auto="001006040000000f00000400"}}) (async) r3 = syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="10000000000001000100050000000000ffffff7f200000005a4d", 0x1a, 0x400}, {&(0x7f0000000440)="ff00feffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff00ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff03f0ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffe1ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed41034844d6de4005", 0x809, 0x800}, {0x0, 0x0, 0x1400}], 0x0, &(0x7f0000000280)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRESOCT=r0, @ANYRESDEC=r0, @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="0741a237fe95b3f9473e827c86aeb2c91f5db3e16a857cced135a569a100bec240301cf67dd1d0d1a1", @ANYRES32, @ANYRESHEX=r2], 0x0) symlinkat(&(0x7f0000002940)='./file0\x00', r3, &(0x7f0000001900)='./file1\x00') 04:07:39 executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000007c0)=ANY=[@ANYBLOB="1201000079201010c2154000f3800102030109021b0001000000000904000001e104550009058b0b40"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x770f0000) 04:07:39 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x801c581f, 0xfffffffffffffffd) 04:07:39 executing program 2: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e040900"], 0x7) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0x1, 0x1, 0x0, 0x4}}, 0x9) syz_emit_vhci(&(0x7f0000000100)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x0, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_conn_rsp={{0x3, 0xfc, 0x8}, {0xfff, 0x101, 0x7ff, 0x5}}]}}, 0x15) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "9fa35c", 0x2}}}, 0xd) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e040900"], 0x7) (async) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0x1, 0x1, 0x0, 0x4}}, 0x9) (async) syz_emit_vhci(&(0x7f0000000100)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x0, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_conn_rsp={{0x3, 0xfc, 0x8}, {0xfff, 0x101, 0x7ff, 0x5}}]}}, 0x15) (async) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "9fa35c", 0x2}}}, 0xd) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) (async) [ 661.839036][ T23] usb 2-1: USB disconnect, device number 89 04:07:39 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time_recursive\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001400)={&(0x7f00000013c0)='ext4_es_find_extent_range_enter\x00'}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r1, 0xff, 0x0, 0x0, 0x0) syncfs(r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_all\x00', 0x7a05, 0x1700) write$cgroup_type(r2, &(0x7f0000000000), 0x20b000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000140)='illinois\x00', 0x9) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000000)=0x2805, 0x4) r4 = openat(0xffffffffffffffff, &(0x7f00000002c0)='/proc/self/exe\x00', 0x0, 0x5) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000280)={0x0, &(0x7f00000001c0)}, 0x10) close(0xffffffffffffffff) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e20, @loopback}, 0x10) sendfile(r3, r4, 0x0, 0x90000) recvmsg(r3, &(0x7f0000000580)={0x0, 0x41, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4084, 0xfffffe1f}], 0x6, 0x0, 0xfffffffffffffcc9}, 0x700) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, 0x0) [ 661.900746][ T27] audit: type=1800 audit(1664078859.333:385): pid=12437 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=".pending_reads" dev="sda1" ino=1177 res=0 errno=0 [ 661.903184][T12438] loop3: detected capacity change from 0 to 20 04:07:39 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0xc0045878, 0xfffffffffffffffd) [ 661.964256][ T27] audit: type=1800 audit(1664078859.333:386): pid=12437 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=".pending_reads" dev="sda1" ino=1177 res=0 errno=0 04:07:39 executing program 3: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x4040, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r0, 0xc0185879, &(0x7f0000000040)={@id={0x2, 0x0, @auto="001006040000000f00000400"}}) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x4040, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r1, 0xc0185879, &(0x7f0000000040)={@id={0x2, 0x0, @auto="001006040000000f00000400"}}) r2 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x4040, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r2, 0xc0185879, &(0x7f0000000040)={@id={0x2, 0x0, @auto="001006040000000f00000400"}}) (async) r3 = syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="10000000000001000100050000000000ffffff7f200000005a4d", 0x1a, 0x400}, {&(0x7f0000000440)="ff00feffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff00ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff03f0ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffe1ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed41034844d6de4005", 0x809, 0x800}, {0x0, 0x0, 0x1400}], 0x0, &(0x7f0000000280)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRESOCT=r0, @ANYRESDEC=r0, @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="0741a237fe95b3f9473e827c86aeb2c91f5db3e16a857cced135a569a100bec240301cf67dd1d0d1a1", @ANYRES32, @ANYRESHEX=r2], 0x0) symlinkat(&(0x7f0000002940)='./file0\x00', r3, &(0x7f0000001900)='./file1\x00') 04:07:39 executing program 2: syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040e04002d0400653a077ec7cadbff57ce1a687d39bd54466e8a44091896b8af1bad65dd01e61f77e4317287f4ba89987f56db082104a3525a4a62cf823ef6805947012abb9417a3bc96399bcf00f9dd177997faabd2fb13a4a613557d544da6503fcd7cec058a6010eb2da31ebab0af79d1ff39834b498da3d069965fa7eabd8b508d88b46cb3d66b478ca25ec8252b60a0687e2468b90ab8d4f7b2b6"], 0x7) [ 662.000510][ T27] audit: type=1800 audit(1664078859.333:387): pid=12437 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=".pending_reads" dev="sda1" ino=1177 res=0 errno=0 [ 662.060541][ T2432] kworker/u4:5: attempt to access beyond end of device [ 662.060541][ T2432] loop3: rw=1, sector=44, nr_sectors = 2 limit=20 [ 662.104700][ T2432] Buffer I/O error on dev loop3, logical block 22, lost async page write [ 662.123893][ T2432] kworker/u4:5: attempt to access beyond end of device [ 662.123893][ T2432] loop3: rw=1, sector=46, nr_sectors = 2 limit=20 [ 662.143014][ T3691] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 662.160756][ T2432] Buffer I/O error on dev loop3, logical block 23, lost async page write [ 662.217272][ T27] audit: type=1800 audit(1664078859.653:388): pid=12456 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=".pending_reads" dev="sda1" ino=1165 res=0 errno=0 [ 662.228891][T12457] loop3: detected capacity change from 0 to 20 [ 662.247705][ T27] audit: type=1800 audit(1664078859.653:389): pid=12456 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=".pending_reads" dev="sda1" ino=1165 res=0 errno=0 [ 662.280642][ T27] audit: type=1800 audit(1664078859.653:390): pid=12456 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=".pending_reads" dev="sda1" ino=1165 res=0 errno=0 [ 662.308924][ T2432] kworker/u4:5: attempt to access beyond end of device [ 662.308924][ T2432] loop3: rw=1, sector=44, nr_sectors = 2 limit=20 [ 662.322986][ T2432] Buffer I/O error on dev loop3, logical block 22, lost async page write [ 662.331621][ T2432] kworker/u4:5: attempt to access beyond end of device [ 662.331621][ T2432] loop3: rw=1, sector=46, nr_sectors = 2 limit=20 [ 662.342851][ T23] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 662.345148][ T2432] Buffer I/O error on dev loop3, logical block 23, lost async page write [ 662.392838][ T3691] usb 5-1: Using ep0 maxpacket: 16 [ 662.512921][ T3691] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 662.582806][ T23] usb 2-1: Using ep0 maxpacket: 16 [ 662.682922][ T3691] usb 5-1: New USB device found, idVendor=15c2, idProduct=0040, bcdDevice=80.f3 [ 662.692045][ T3691] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 662.700191][ T3691] usb 5-1: Product: syz [ 662.704550][ T23] usb 2-1: config 0 descriptor has 1 excess byte, ignoring [ 662.711792][ T23] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 662.729149][ T3691] usb 5-1: Manufacturer: syz [ 662.734776][ T3691] usb 5-1: SerialNumber: syz [ 662.741751][ T3691] usb 5-1: config 0 descriptor?? [ 662.784996][ T3691] input: iMON Panel, Knob and Mouse(15c2:0040) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input261 [ 662.892844][ T23] usb 2-1: New USB device found, idVendor=15c2, idProduct=0040, bcdDevice=80.f3 [ 662.902022][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 662.914446][ T23] usb 2-1: Product: syz [ 662.918706][ T23] usb 2-1: Manufacturer: syz [ 662.925744][ T23] usb 2-1: SerialNumber: syz [ 662.935485][ T23] usb 2-1: config 0 descriptor?? [ 663.072705][ T3691] rc_core: IR keymap rc-imon-pad not found [ 663.078931][ T3691] Registered IR keymap rc-empty [ 663.084383][ T3691] imon 5-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 663.094690][ T3691] imon 5-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 663.244402][ T3691] rc rc0: iMON Remote (15c2:0040) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 663.255304][ T3691] input: iMON Remote (15c2:0040) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input262 [ 663.269474][ T3691] imon 5-1:0.0: iMON device (15c2:0040, intf0) on usb<5:72> initialized [ 663.441106][T12425] imon:vfd_write: invalid payload size [ 663.447949][ T3691] usb 5-1: USB disconnect, device number 72 04:07:42 executing program 1: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000079201010c2154000f3800102030109021b00010000dbaa1163c7a88f4c04550009058b0b40ac6f40322989bc5046c05c80420370880eb94e73afeb308032d5018b70438ea945a01ee4ce36287894dc0f474d6845a41f59166d7587efdf4835e990d32bda119efc280eec95786acbfc367e6d2db201661598a4a83839ec5423bdfc2f472e95e5c3bf9f82c6ff"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) 04:07:42 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time_recursive\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001400)={&(0x7f00000013c0)='ext4_es_find_extent_range_enter\x00'}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r1, 0xff, 0x0, 0x0, 0x0) syncfs(r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_all\x00', 0x7a05, 0x1700) write$cgroup_type(r2, &(0x7f0000000000), 0x20b000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000140)='illinois\x00', 0x9) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000000)=0x2805, 0x4) r4 = openat(0xffffffffffffffff, &(0x7f00000002c0)='/proc/self/exe\x00', 0x0, 0x5) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000280)={0x0, &(0x7f00000001c0)}, 0x10) close(0xffffffffffffffff) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e20, @loopback}, 0x10) sendfile(r3, r4, 0x0, 0x90000) recvmsg(r3, &(0x7f0000000580)={0x0, 0x41, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4084, 0xfffffe1f}], 0x6, 0x0, 0xfffffffffffffcc9}, 0x700) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time_recursive\x00', 0x26e1, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001400)={&(0x7f00000013c0)='ext4_es_find_extent_range_enter\x00'}, 0x10) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) getsockopt(r1, 0xff, 0x0, 0x0, 0x0) (async) syncfs(r1) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_all\x00', 0x7a05, 0x1700) (async) write$cgroup_type(r2, &(0x7f0000000000), 0x20b000) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000140)='illinois\x00', 0x9) (async) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10) (async) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000000)=0x2805, 0x4) (async) openat(0xffffffffffffffff, &(0x7f00000002c0)='/proc/self/exe\x00', 0x0, 0x5) (async) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000280)={0x0, &(0x7f00000001c0)}, 0x10) (async) close(0xffffffffffffffff) (async) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e20, @loopback}, 0x10) (async) sendfile(r3, r4, 0x0, 0x90000) (async) recvmsg(r3, &(0x7f0000000580)={0x0, 0x41, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4084, 0xfffffe1f}], 0x6, 0x0, 0xfffffffffffffcc9}, 0x700) (async) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, 0x0) (async) 04:07:42 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0xc0045878, 0xfffffffffffffffd) 04:07:42 executing program 2: syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040e04002d0400653a077ec7cadbff57ce1a687d39bd54466e8a44091896b8af1bad65dd01e61f77e4317287f4ba89987f56db082104a3525a4a62cf823ef6805947012abb9417a3bc96399bcf00f9dd177997faabd2fb13a4a613557d544da6503fcd7cec058a6010eb2da31ebab0af79d1ff39834b498da3d069965fa7eabd8b508d88b46cb3d66b478ca25ec8252b60a0687e2468b90ab8d4f7b2b6"], 0x7) 04:07:42 executing program 3: r0 = syz_mount_image$minix(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="10000000000001000100050000000000ffffff7f200000005a4d", 0x1a, 0x400}, {&(0x7f0000000440)="ff00feffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff00ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff03f0ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffe1ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed41034844d6de4005", 0x809, 0x802}, {0x0, 0x0, 0x1400}], 0x0, &(0x7f0000000500)=ANY=[], 0x0) open(&(0x7f0000000080)='./file0\x00', 0x280200, 0x80) symlinkat(&(0x7f0000002940)='./file0\x00', r0, &(0x7f0000001900)='./file1\x00') 04:07:42 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time_recursive\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001400)={&(0x7f0000000300)='ext4_es_find_extent_range_enter\x00'}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r1, 0xff, 0xffffffff, 0x0, 0x0) syncfs(r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r2, &(0x7f0000000000), 0x20b000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000200)='illinois\x00', 0x9) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000000)=0x2805, 0x4) r4 = openat(0xffffffffffffffff, &(0x7f00000002c0)='/proc/self/exe\x00', 0x0, 0x145) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd, 0x0, 0x0, 0x0, {0xd788}}, 0x2) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000280)={0x0, &(0x7f00000001c0)}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e20, @loopback}, 0x10) sendfile(r3, r4, 0x0, 0x90000) recvmsg(r3, &(0x7f0000000580)={0x0, 0x41, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4084, 0xfffffe1f}], 0x6, 0x0, 0xfffffffffffffcc9}, 0x700) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, 0x0) [ 664.894595][ T142] usb 2-1: USB disconnect, device number 90 04:07:42 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time_recursive\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001400)={&(0x7f00000013c0)='ext4_es_find_extent_range_enter\x00'}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r1, 0xff, 0x0, 0x0, 0x0) syncfs(r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_all\x00', 0x7a05, 0x1700) write$cgroup_type(r2, &(0x7f0000000000), 0x20b000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000140)='illinois\x00', 0x9) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000000)=0x2805, 0x4) r4 = openat(0xffffffffffffffff, &(0x7f00000002c0)='/proc/self/exe\x00', 0x0, 0x5) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000280)={0x0, &(0x7f00000001c0)}, 0x10) close(0xffffffffffffffff) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e20, @loopback}, 0x10) sendfile(r3, r4, 0x0, 0x90000) recvmsg(r3, &(0x7f0000000580)={0x0, 0x41, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4084, 0xfffffe1f}], 0x6, 0x0, 0xfffffffffffffcc9}, 0x700) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time_recursive\x00', 0x26e1, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001400)={&(0x7f00000013c0)='ext4_es_find_extent_range_enter\x00'}, 0x10) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) getsockopt(r1, 0xff, 0x0, 0x0, 0x0) (async) syncfs(r1) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_all\x00', 0x7a05, 0x1700) (async) write$cgroup_type(r2, &(0x7f0000000000), 0x20b000) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000140)='illinois\x00', 0x9) (async) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10) (async) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000000)=0x2805, 0x4) (async) openat(0xffffffffffffffff, &(0x7f00000002c0)='/proc/self/exe\x00', 0x0, 0x5) (async) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000280)={0x0, &(0x7f00000001c0)}, 0x10) (async) close(0xffffffffffffffff) (async) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e20, @loopback}, 0x10) (async) sendfile(r3, r4, 0x0, 0x90000) (async) recvmsg(r3, &(0x7f0000000580)={0x0, 0x41, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4084, 0xfffffe1f}], 0x6, 0x0, 0xfffffffffffffcc9}, 0x700) (async) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, 0x0) (async) 04:07:42 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0xc0189436, 0xfffffffffffffffd) 04:07:42 executing program 2: syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040e04002d0400653a077ec7cadbff57ce1a687d39bd54466e8a44091896b8af1bad65dd01e61f77e4317287f4ba89987f56db082104a3525a4a62cf823ef6805947012abb9417a3bc96399bcf00f9dd177997faabd2fb13a4a613557d544da6503fcd7cec058a6010eb2da31ebab0af79d1ff39834b498da3d069965fa7eabd8b508d88b46cb3d66b478ca25ec8252b60a0687e2468b90ab8d4f7b2b6"], 0x7) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040e04002d0400653a077ec7cadbff57ce1a687d39bd54466e8a44091896b8af1bad65dd01e61f77e4317287f4ba89987f56db082104a3525a4a62cf823ef6805947012abb9417a3bc96399bcf00f9dd177997faabd2fb13a4a613557d544da6503fcd7cec058a6010eb2da31ebab0af79d1ff39834b498da3d069965fa7eabd8b508d88b46cb3d66b478ca25ec8252b60a0687e2468b90ab8d4f7b2b6"], 0x7) (async) 04:07:42 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time_recursive\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001400)={&(0x7f0000000300)='ext4_es_find_extent_range_enter\x00'}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r1, 0xff, 0xffffffff, 0x0, 0x0) syncfs(r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r2, &(0x7f0000000000), 0x20b000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000200)='illinois\x00', 0x9) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000000)=0x2805, 0x4) r4 = openat(0xffffffffffffffff, &(0x7f00000002c0)='/proc/self/exe\x00', 0x0, 0x145) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd, 0x0, 0x0, 0x0, {0xd788}}, 0x2) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000280)={0x0, &(0x7f00000001c0)}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e20, @loopback}, 0x10) sendfile(r3, r4, 0x0, 0x90000) recvmsg(r3, &(0x7f0000000580)={0x0, 0x41, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4084, 0xfffffe1f}], 0x6, 0x0, 0xfffffffffffffcc9}, 0x700) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, 0x0) [ 664.939923][T12470] loop3: detected capacity change from 0 to 20 04:07:42 executing program 3: r0 = syz_mount_image$minix(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="10000000000001000100050000000000ffffff7f200000005a4d", 0x1a, 0x400}, {&(0x7f0000000440)="ff00feffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff00ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff03f0ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffe1ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed41034844d6de4005", 0x809, 0x802}, {0x0, 0x0, 0x1400}], 0x0, &(0x7f0000000500)=ANY=[], 0x0) open(&(0x7f0000000080)='./file0\x00', 0x280200, 0x80) symlinkat(&(0x7f0000002940)='./file0\x00', r0, &(0x7f0000001900)='./file1\x00') syz_mount_image$minix(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="10000000000001000100050000000000ffffff7f200000005a4d", 0x1a, 0x400}, {&(0x7f0000000440)="ff00feffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff00ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff03f0ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffe1ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed41034844d6de4005", 0x809, 0x802}, {0x0, 0x0, 0x1400}], 0x0, &(0x7f0000000500)=ANY=[], 0x0) (async) open(&(0x7f0000000080)='./file0\x00', 0x280200, 0x80) (async) symlinkat(&(0x7f0000002940)='./file0\x00', r0, &(0x7f0000001900)='./file1\x00') (async) 04:07:42 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time_recursive\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001400)={&(0x7f00000013c0)='ext4_es_find_extent_range_enter\x00'}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r1, 0xff, 0x0, 0x0, 0x0) syncfs(r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r2, &(0x7f0000000000), 0x20b000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000200)='illinois\x00', 0x9) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000000)=0x2805, 0x4) r4 = openat(0xffffffffffffffff, &(0x7f00000002c0)='/proc/self/exe\x00', 0x0, 0x5) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000280)={0x0, &(0x7f00000001c0)}, 0x10) close(0xffffffffffffffff) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e20, @loopback}, 0x10) sendfile(r3, r4, 0x0, 0x90000) recvmsg(r3, &(0x7f0000000580)={0x0, 0x41, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4084, 0xfffffe1f}], 0x6, 0x0, 0xfffffffffffffcc9}, 0x700) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, 0x0) [ 665.112878][T12482] loop3: detected capacity change from 0 to 20 [ 665.168607][ T9814] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 665.183395][T12482] loop3: detected capacity change from 0 to 20 [ 665.185755][ T9814] Buffer I/O error on dev loop3, logical block 0, async page read [ 665.222689][ T9814] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 665.362860][ T142] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 665.622715][ T142] usb 2-1: Using ep0 maxpacket: 16 [ 665.742868][ T142] usb 2-1: config 0 descriptor has 1 excess byte, ignoring [ 665.750279][ T142] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 665.913124][ T142] usb 2-1: New USB device found, idVendor=15c2, idProduct=0040, bcdDevice=80.f3 [ 665.922298][ T142] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 665.930519][ T142] usb 2-1: Product: syz [ 665.934791][ T142] usb 2-1: Manufacturer: syz [ 665.939430][ T142] usb 2-1: SerialNumber: syz [ 665.947097][ T142] usb 2-1: config 0 descriptor?? 04:07:45 executing program 1: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000007c0)=ANY=[@ANYBLOB="1201000079201010c2154000f3800102030109021b0001000000000904000001e104550009058b0b40"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, &(0x7f0000000000)="68a50197f57ee21a30b7c543b8cac046aa3809f7293c07e837f6febc357744c4bf61ceba5b98a7f6803f9ad5629c82a57bcc4bfc78d86a9cd1ec96c7c9f99aed4d1a3635ff494fe118d54a936c180eae4bfa98fe398174a3b87fccca43ad2ca6941ff52d4d0638a5f53c7a8f7cd7cdfb3b48500bc63368f92f1a545083e956efdf0141040924f23c8dfa87b52f58f3", 0x8f) 04:07:45 executing program 3: r0 = syz_mount_image$minix(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="10000000000001000100050000000000ffffff7f200000005a4d", 0x1a, 0x400}, {&(0x7f0000000440)="ff00feffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff00ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff03f0ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffe1ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed41034844d6de4005", 0x809, 0x802}, {0x0, 0x0, 0x1400}], 0x0, &(0x7f0000000500)=ANY=[], 0x0) open(&(0x7f0000000080)='./file0\x00', 0x280200, 0x80) symlinkat(&(0x7f0000002940)='./file0\x00', r0, &(0x7f0000001900)='./file1\x00') syz_mount_image$minix(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="10000000000001000100050000000000ffffff7f200000005a4d", 0x1a, 0x400}, {&(0x7f0000000440)="ff00feffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff00ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff03f0ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffe1ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed41034844d6de4005", 0x809, 0x802}, {0x0, 0x0, 0x1400}], 0x0, &(0x7f0000000500)=ANY=[], 0x0) (async) open(&(0x7f0000000080)='./file0\x00', 0x280200, 0x80) (async) symlinkat(&(0x7f0000002940)='./file0\x00', r0, &(0x7f0000001900)='./file1\x00') (async) 04:07:45 executing program 2: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_USER_CONFIRM_NEG_REPLY}}, 0x7) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_user_confirm_req={{0x33, 0xa}, {@any, 0x80000001}}}, 0xd) 04:07:45 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time_recursive\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001400)={&(0x7f0000000300)='ext4_es_find_extent_range_enter\x00'}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r1, 0xff, 0xffffffff, 0x0, 0x0) syncfs(r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r2, &(0x7f0000000000), 0x20b000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000200)='illinois\x00', 0x9) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000000)=0x2805, 0x4) r4 = openat(0xffffffffffffffff, &(0x7f00000002c0)='/proc/self/exe\x00', 0x0, 0x145) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd, 0x0, 0x0, 0x0, {0xd788}}, 0x2) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000280)={0x0, &(0x7f00000001c0)}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e20, @loopback}, 0x10) sendfile(r3, r4, 0x0, 0x90000) recvmsg(r3, &(0x7f0000000580)={0x0, 0x41, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4084, 0xfffffe1f}], 0x6, 0x0, 0xfffffffffffffcc9}, 0x700) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, 0x0) 04:07:45 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0xc020660b, 0xfffffffffffffffd) 04:07:45 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time_recursive\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001400)={&(0x7f00000013c0)='ext4_es_find_extent_range_enter\x00'}, 0x10) (async) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r1, 0xff, 0x0, 0x0, 0x0) (async) syncfs(r1) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r2, &(0x7f0000000000), 0x20b000) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000200)='illinois\x00', 0x9) (async) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000000)=0x2805, 0x4) r4 = openat(0xffffffffffffffff, &(0x7f00000002c0)='/proc/self/exe\x00', 0x0, 0x5) (async, rerun: 32) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000280)={0x0, &(0x7f00000001c0)}, 0x10) (async, rerun: 32) close(0xffffffffffffffff) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e20, @loopback}, 0x10) (async) sendfile(r3, r4, 0x0, 0x90000) (async) recvmsg(r3, &(0x7f0000000580)={0x0, 0x41, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4084, 0xfffffe1f}], 0x6, 0x0, 0xfffffffffffffcc9}, 0x700) (async) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, 0x0) [ 667.951441][ T3779] usb 2-1: USB disconnect, device number 91 04:07:45 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x4c80, 0xfffffffffffffffd) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) 04:07:45 executing program 2: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_USER_CONFIRM_NEG_REPLY}}, 0x7) (async, rerun: 64) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_user_confirm_req={{0x33, 0xa}, {@any, 0x80000001}}}, 0xd) (rerun: 64) 04:07:45 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time_recursive\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001400)={&(0x7f00000013c0)='ext4_es_find_extent_range_enter\x00'}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r1, 0xff, 0x0, 0x0, 0x0) syncfs(r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r2, &(0x7f0000000000), 0x20b000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000200)='illinois\x00', 0x9) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000000)=0x2805, 0x4) r4 = openat(0xffffffffffffffff, &(0x7f00000002c0)='/proc/self/exe\x00', 0x0, 0x5) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000280)={0x0, &(0x7f00000001c0)}, 0x10) close(0xffffffffffffffff) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e20, @loopback}, 0x10) sendfile(r3, r4, 0x0, 0x90000) recvmsg(r3, &(0x7f0000000580)={0x0, 0x41, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4084, 0xfffffe1f}], 0x6, 0x0, 0xfffffffffffffcc9}, 0x700) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time_recursive\x00', 0x26e1, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001400)={&(0x7f00000013c0)='ext4_es_find_extent_range_enter\x00'}, 0x10) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) getsockopt(r1, 0xff, 0x0, 0x0, 0x0) (async) syncfs(r1) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async) write$cgroup_type(r2, &(0x7f0000000000), 0x20b000) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000200)='illinois\x00', 0x9) (async) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10) (async) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000000)=0x2805, 0x4) (async) openat(0xffffffffffffffff, &(0x7f00000002c0)='/proc/self/exe\x00', 0x0, 0x5) (async) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000280)={0x0, &(0x7f00000001c0)}, 0x10) (async) close(0xffffffffffffffff) (async) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e20, @loopback}, 0x10) (async) sendfile(r3, r4, 0x0, 0x90000) (async) recvmsg(r3, &(0x7f0000000580)={0x0, 0x41, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4084, 0xfffffe1f}], 0x6, 0x0, 0xfffffffffffffcc9}, 0x700) (async) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, 0x0) (async) 04:07:45 executing program 4: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x115000, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000280)="b9bd186c49ff0c01a191a1206820b1bc9dd684b6ce710da011c74d7e784bec619b6d0ea83bdd5c1dc1247b1bc00c0c56b8e3eba418f1fd75ca8e8705c5a9876a025b702278689334d35fb9d459e53e1429d3ecb6ca51e00d685b72adca32f136b8c8e9a7fb3815127c46ad01e9764b4ebdce8b12f818ee765cd8ec2d3cb46a6fd4036b5295f355d3f5430b07488a7e237a6b197ddd9dc9b268053155b7f650b4f0f368caaab5b2bb880586c2be84f0cff25e5837e2c0fafbc4e3233cc7b616f8044be3726307b70f954367aba67bab3230c5204add47b48f90040ed0d0b135da", 0xe0) r1 = syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="10000000000001000100050000000000ffffff7f200000005a4d", 0x1a, 0x400}, {&(0x7f0000000c80)="ff00feffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff00fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffefffffffffffffffffffffffffffffffffffffffffffeffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffbfffffffffff03f0ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffe1ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed41034844d6de4005585fdb85db06aa7742363472c646f0a0a0f367d2766ed515087e80b8ffcd8e6478539523a1b66a6f78f5ab43c8345a6aad6505f442632b5dd03d9b767ea86827ad9d9f1705986b333e", 0x852, 0x800}, {0x0, 0x0, 0x1400}], 0x0, &(0x7f0000000500)=ANY=[], 0x0) symlinkat(&(0x7f0000002940)='./file0\x00', r1, &(0x7f0000001900)='./file1\x00') [ 667.993023][T12495] loop3: detected capacity change from 0 to 20 04:07:45 executing program 2: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_USER_CONFIRM_NEG_REPLY}}, 0x7) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_user_confirm_req={{0x33, 0xa}, {@any, 0x80000001}}}, 0xd) 04:07:45 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time_recursive\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x40000003, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001400)={&(0x7f00000013c0)='ext4_es_find_extent_range_enter\x00'}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r1, 0xff, 0x0, 0x0, 0x0) syncfs(r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r2, &(0x7f0000000000), 0x20b000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000200)='illinois\x00', 0x9) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000000)=0x2805, 0x4) r4 = openat(0xffffffffffffffff, &(0x7f00000002c0)='/proc/self/exe\x00', 0x0, 0x5) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000280)={0x3, &(0x7f0000000300)=[{0x1, 0x2, 0x5c, 0x80000000}, {0x1002, 0x5, 0x1, 0x400}, {0x0, 0x2a, 0x9, 0x4}]}, 0x10) close(0xffffffffffffffff) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e20, @loopback}, 0x10) sendfile(r3, r4, 0x0, 0x90000) recvmsg(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4084, 0xff4}], 0x1}, 0x40012701) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, 0x0) [ 668.066275][T12495] loop3: detected capacity change from 0 to 20 [ 668.099014][T12514] loop4: detected capacity change from 0 to 20 [ 668.146492][T12514] syz-executor.4: attempt to access beyond end of device [ 668.146492][T12514] loop4: rw=0, sector=3488039232, nr_sectors = 2 limit=20 [ 668.197041][T12514] Buffer I/O error on dev loop4, logical block 1744019616, async page read [ 668.220212][T12514] syz-executor.4: attempt to access beyond end of device [ 668.220212][T12514] loop4: rw=0, sector=7161572772, nr_sectors = 2 limit=20 [ 668.238081][T12514] Buffer I/O error on dev loop4, logical block 3580786386, async page read [ 668.255047][T12514] syz-executor.4: attempt to access beyond end of device [ 668.255047][T12514] loop4: rw=0, sector=4311486506, nr_sectors = 2 limit=20 [ 668.280235][T12514] Buffer I/O error on dev loop4, logical block 2155743253, async page read [ 668.290311][T12514] syz-executor.4: attempt to access beyond end of device [ 668.290311][T12514] loop4: rw=0, sector=4791730032, nr_sectors = 2 limit=20 [ 668.310020][T12514] Buffer I/O error on dev loop4, logical block 2395865016, async page read [ 668.319627][T12514] syz-executor.4: attempt to access beyond end of device [ 668.319627][T12514] loop4: rw=0, sector=5010550984, nr_sectors = 2 limit=20 [ 668.334702][T12514] Buffer I/O error on dev loop4, logical block 2505275492, async page read [ 668.346133][T12514] syz-executor.4: attempt to access beyond end of device [ 668.346133][T12514] loop4: rw=0, sector=3580707398, nr_sectors = 2 limit=20 [ 668.367354][T12514] Buffer I/O error on dev loop4, logical block 1790353699, async page read [ 668.376918][T12514] syz-executor.4: attempt to access beyond end of device [ 668.376918][T12514] loop4: rw=0, sector=5769982174, nr_sectors = 2 limit=20 [ 668.391821][T12514] Buffer I/O error on dev loop4, logical block 2884991087, async page read [ 668.452959][ T3779] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 668.713037][ T3779] usb 2-1: Using ep0 maxpacket: 16 [ 668.842858][ T3779] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 669.042771][ T3779] usb 2-1: New USB device found, idVendor=15c2, idProduct=0040, bcdDevice=80.f3 [ 669.052558][ T3779] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 669.068396][ T3779] usb 2-1: Product: syz [ 669.075306][ T3779] usb 2-1: Manufacturer: syz [ 669.080109][ T3779] usb 2-1: SerialNumber: syz [ 669.091574][ T3779] usb 2-1: config 0 descriptor?? [ 669.135444][ T3779] input: iMON Panel, Knob and Mouse(15c2:0040) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input263 [ 669.452699][ T3779] rc_core: IR keymap rc-imon-pad not found [ 669.458737][ T3779] Registered IR keymap rc-empty [ 669.471222][ T3779] imon 2-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 669.482212][ T3779] imon 2-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 669.593318][ T3779] rc rc0: iMON Remote (15c2:0040) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 669.612211][ T3779] input: iMON Remote (15c2:0040) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input264 [ 669.639490][ T3779] imon 2-1:0.0: iMON device (15c2:0040, intf0) on usb<2:92> initialized [ 669.776159][T12503] imon:vfd_write: invalid payload size [ 669.792800][T12503] imon:vfd_write: invalid payload size [ 669.833362][ T142] usb 2-1: USB disconnect, device number 92 04:07:47 executing program 1: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000007c0)=ANY=[@ANYBLOB="1201000079201010c2154000f3800102030109021b0001000000000904000001e104550009058b0b40"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) (async) write$char_usb(r1, &(0x7f0000000000)="68a50197f57ee21a30b7c543b8cac046aa3809f7293c07e837f6febc357744c4bf61ceba5b98a7f6803f9ad5629c82a57bcc4bfc78d86a9cd1ec96c7c9f99aed4d1a3635ff494fe118d54a936c180eae4bfa98fe398174a3b87fccca43ad2ca6941ff52d4d0638a5f53c7a8f7cd7cdfb3b48500bc63368f92f1a545083e956efdf0141040924f23c8dfa87b52f58f3", 0x8f) 04:07:47 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x4c80, 0xfffffffffffffffd) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$FS_IOC_SETFLAGS(r0, 0x4c80, 0xfffffffffffffffd) (async) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (async) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) (async) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) (async) 04:07:47 executing program 2: openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x3, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040ebb48eb04000d0400"], 0x7) 04:07:47 executing program 3: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x4040, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r0, 0xc0185879, &(0x7f0000000040)={@id={0x2, 0x0, @auto="001006040000000f00000400"}}) ioctl$EXT4_IOC_GETSTATE(r0, 0x40046629, &(0x7f0000000040)) symlinkat(&(0x7f0000000000)='./file1/file0\x00', 0xffffffffffffffff, &(0x7f0000001900)='./file1\x00') 04:07:47 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time_recursive\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x40000003, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001400)={&(0x7f00000013c0)='ext4_es_find_extent_range_enter\x00'}, 0x10) (async) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r1, 0xff, 0x0, 0x0, 0x0) (async) syncfs(r1) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r2, &(0x7f0000000000), 0x20b000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000200)='illinois\x00', 0x9) (async) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000000)=0x2805, 0x4) r4 = openat(0xffffffffffffffff, &(0x7f00000002c0)='/proc/self/exe\x00', 0x0, 0x5) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000280)={0x3, &(0x7f0000000300)=[{0x1, 0x2, 0x5c, 0x80000000}, {0x1002, 0x5, 0x1, 0x400}, {0x0, 0x2a, 0x9, 0x4}]}, 0x10) (async) close(0xffffffffffffffff) (async) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e20, @loopback}, 0x10) (async) sendfile(r3, r4, 0x0, 0x90000) recvmsg(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4084, 0xff4}], 0x1}, 0x40012701) (async) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, 0x0) 04:07:47 executing program 2: openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x3, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040ebb48eb04000d0400"], 0x7) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x3, 0x0) (async) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040ebb48eb04000d0400"], 0x7) (async) 04:07:47 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time_recursive\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x40000003, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001400)={&(0x7f00000013c0)='ext4_es_find_extent_range_enter\x00'}, 0x10) (async) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r1, 0xff, 0x0, 0x0, 0x0) syncfs(r1) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r2, &(0x7f0000000000), 0x20b000) (async, rerun: 32) r3 = socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 32) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000200)='illinois\x00', 0x9) (async) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000000)=0x2805, 0x4) r4 = openat(0xffffffffffffffff, &(0x7f00000002c0)='/proc/self/exe\x00', 0x0, 0x5) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000280)={0x3, &(0x7f0000000300)=[{0x1, 0x2, 0x5c, 0x80000000}, {0x1002, 0x5, 0x1, 0x400}, {0x0, 0x2a, 0x9, 0x4}]}, 0x10) (async, rerun: 64) close(0xffffffffffffffff) (rerun: 64) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e20, @loopback}, 0x10) (async) sendfile(r3, r4, 0x0, 0x90000) (async) recvmsg(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4084, 0xff4}], 0x1}, 0x40012701) (async) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, 0x0) 04:07:47 executing program 3: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x4040, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r0, 0xc0185879, &(0x7f0000000040)={@id={0x2, 0x0, @auto="001006040000000f00000400"}}) (async) ioctl$EXT4_IOC_GETSTATE(r0, 0x40046629, &(0x7f0000000040)) symlinkat(&(0x7f0000000000)='./file1/file0\x00', 0xffffffffffffffff, &(0x7f0000001900)='./file1\x00') [ 670.375276][ T27] audit: type=1800 audit(1664078867.813:391): pid=12529 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=".pending_reads" dev="sda1" ino=1160 res=0 errno=0 04:07:47 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x4c80, 0xfffffffffffffffd) (async) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) (async) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) [ 670.514029][ T27] audit: type=1800 audit(1664078867.953:392): pid=12546 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=".pending_reads" dev="sda1" ino=1160 res=0 errno=0 [ 670.682687][ T3691] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 670.932686][ T3691] usb 2-1: Using ep0 maxpacket: 16 [ 671.052946][ T3691] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 671.226624][ T3691] usb 2-1: New USB device found, idVendor=15c2, idProduct=0040, bcdDevice=80.f3 [ 671.245824][ T3691] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 671.275933][ T3691] usb 2-1: Product: syz [ 671.280133][ T3691] usb 2-1: Manufacturer: syz [ 671.295967][ T3691] usb 2-1: SerialNumber: syz [ 671.326083][ T3691] usb 2-1: config 0 descriptor?? [ 671.365362][ T3691] input: iMON Panel, Knob and Mouse(15c2:0040) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input265 [ 671.662686][ T3691] rc_core: IR keymap rc-imon-pad not found [ 671.668636][ T3691] Registered IR keymap rc-empty [ 671.679598][ T3691] imon 2-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 671.698502][ T3691] imon 2-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 671.823213][ T3691] rc rc0: iMON Remote (15c2:0040) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 671.852431][ T3691] input: iMON Remote (15c2:0040) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input266 [ 671.881259][ T3691] imon 2-1:0.0: iMON device (15c2:0040, intf0) on usb<2:93> initialized [ 672.006413][ T3779] usb 2-1: USB disconnect, device number 93 [ 685.034264][ T1233] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.040919][ T1233] ieee802154 phy1 wpan1: encryption failed: -22 04:08:40 executing program 4: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x115000, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000280)="b9bd186c49ff0c01a191a1206820b1bc9dd684b6ce710da011c74d7e784bec619b6d0ea83bdd5c1dc1247b1bc00c0c56b8e3eba418f1fd75ca8e8705c5a9876a025b702278689334d35fb9d459e53e1429d3ecb6ca51e00d685b72adca32f136b8c8e9a7fb3815127c46ad01e9764b4ebdce8b12f818ee765cd8ec2d3cb46a6fd4036b5295f355d3f5430b07488a7e237a6b197ddd9dc9b268053155b7f650b4f0f368caaab5b2bb880586c2be84f0cff25e5837e2c0fafbc4e3233cc7b616f8044be3726307b70f954367aba67bab3230c5204add47b48f90040ed0d0b135da", 0xe0) r1 = syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="10000000000001000100050000000000ffffff7f200000005a4d", 0x1a, 0x400}, {&(0x7f0000000c80)="ff00feffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff00fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffefffffffffffffffffffffffffffffffffffffffffffeffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffbfffffffffff03f0ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffe1ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed41034844d6de4005585fdb85db06aa7742363472c646f0a0a0f367d2766ed515087e80b8ffcd8e6478539523a1b66a6f78f5ab43c8345a6aad6505f442632b5dd03d9b767ea86827ad9d9f1705986b333e", 0x852, 0x800}, {0x0, 0x0, 0x1400}], 0x0, &(0x7f0000000500)=ANY=[], 0x0) symlinkat(&(0x7f0000002940)='./file0\x00', r1, &(0x7f0000001900)='./file1\x00') 04:08:40 executing program 3: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x4040, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r0, 0xc0185879, &(0x7f0000000040)={@id={0x2, 0x0, @auto="001006040000000f00000400"}}) ioctl$EXT4_IOC_GETSTATE(r0, 0x40046629, &(0x7f0000000040)) symlinkat(&(0x7f0000000000)='./file1/file0\x00', 0xffffffffffffffff, &(0x7f0000001900)='./file1\x00') openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x4040, 0x0) (async) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r0, 0xc0185879, &(0x7f0000000040)={@id={0x2, 0x0, @auto="001006040000000f00000400"}}) (async) ioctl$EXT4_IOC_GETSTATE(r0, 0x40046629, &(0x7f0000000040)) (async) symlinkat(&(0x7f0000000000)='./file1/file0\x00', 0xffffffffffffffff, &(0x7f0000001900)='./file1\x00') (async) 04:08:40 executing program 2: openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x3, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040ebb48eb04000d0400"], 0x7) 04:08:40 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time_recursive\x00', 0x26e1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x4, &(0x7f00000000c0)=ANY=[@ANYRES16=r0, @ANYRES16=r1, @ANYRESDEC=r0, @ANYRES8, @ANYRESDEC], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001400)={&(0x7f00000013c0)='ext4_es_find_extent_range_enter\x00'}, 0x10) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r2, 0xff, 0x0, 0x0, 0x0) syncfs(r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r3, &(0x7f0000000000), 0x20b000) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000200)='illinois\x00', 0x9) bind$inet(0xffffffffffffffff, &(0x7f0000000300)={0x2, 0x4e24, @empty}, 0x10) setsockopt$inet_tcp_int(r4, 0x6, 0x2, &(0x7f0000000000)=0x2805, 0x4) r5 = openat(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x40, 0x5) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000280)={0x0, &(0x7f00000001c0)}, 0x10) close(0xffffffffffffffff) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e20, @loopback}, 0x10) sendfile(r4, r5, 0x0, 0x90000) recvmsg(r4, &(0x7f0000000580)={0x0, 0x41, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4084, 0xfffffe1f}], 0x6, 0x0, 0xfffffffffffffcc9}, 0x700) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, 0x0) 04:08:40 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000040)='.log\x00', 0x200000, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c81) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r5) sendmsg$NBD_CMD_RECONFIGURE(r5, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x24, r6, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_TIMEOUT={0xc}]}, 0x24}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = accept4$bt_l2cap(r8, &(0x7f00000000c0), &(0x7f0000000180)=0xe, 0x80800) ioctl$sock_inet_SIOCSIFDSTADDR(r9, 0x8918, &(0x7f00000001c0)={'veth0\x00', {0x2, 0x4e20, @loopback}}) sendmsg$NBD_CMD_RECONFIGURE(r4, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)={0x48, r6, 0x20, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x6738}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nbd\x00'}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8, 0x1, r7}, {0x8, 0x1, r2}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x901}, 0x40) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x262e00, 0x0) r11 = ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r10, 0x4c80, r11) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r11) ioctl$FS_IOC_SETFLAGS(r0, 0x4c80, 0xfffffffffffffffd) 04:08:40 executing program 1: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000007c0)=ANY=[@ANYBLOB="1201000079201010c2154000f3800102030109021b0001000000000904000001e104550009058b0b40"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, &(0x7f0000000000)="68a50197f57ee21a30b7c543b8cac046aa3809f7293c07e837f6febc357744c4bf61ceba5b98a7f6803f9ad5629c82a57bcc4bfc78d86a9cd1ec96c7c9f99aed4d1a3635ff494fe118d54a936c180eae4bfa98fe398174a3b87fccca43ad2ca6941ff52d4d0638a5f53c7a8f7cd7cdfb3b48500bc63368f92f1a545083e956efdf0141040924f23c8dfa87b52f58f3", 0x8f) syz_usb_connect(0x0, 0x2d, &(0x7f00000007c0)=ANY=[@ANYBLOB="1201000079201010c2154000f3800102030109021b0001000000000904000001e104550009058b0b40"], 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) write$char_usb(r1, 0x0, 0x0) (async) write$char_usb(r1, &(0x7f0000000000)="68a50197f57ee21a30b7c543b8cac046aa3809f7293c07e837f6febc357744c4bf61ceba5b98a7f6803f9ad5629c82a57bcc4bfc78d86a9cd1ec96c7c9f99aed4d1a3635ff494fe118d54a936c180eae4bfa98fe398174a3b87fccca43ad2ca6941ff52d4d0638a5f53c7a8f7cd7cdfb3b48500bc63368f92f1a545083e956efdf0141040924f23c8dfa87b52f58f3", 0x8f) (async) 04:08:40 executing program 2: syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @extended_inquiry_info={{0x2f, 0x9ed}, {0xa, [{@any, 0x40, 0x66, "f21e48", 0x1f, 0x81, "40b6b685e7b95199679583c4e9308a2057f6b329d7f71bf0438af5ea4cb5b946c1ad10f4d36fc9aa65c59175826b2f967c308a9383d9860f254fd362cc14577b65db24694e91e9c82e2bc86ac5c389aeb41ab109c3729d12b08ce7ff6c22b95e4c6543ef79eeb2a270443445e292193313860265946b20692bcaa7d5fb8e012cb312e8e303372958efa2be9e41a0f59e662a008b2ce333d7e7940b8bb5c1c78615df491e68d569d5888789a132ffa3ec1858802304166ea8a81ece3cd991ca8567c3024249436bd0a9197be4e82f579f0e4bfc1155f0edde31c63f1b5067a2182a31d1d78e4e7e59121d43267b500679"}, {@any, 0x3f, 0x8, "2cf949", 0x1, 0x1, "c4dcc2bb58cc10ee0ed59756ed8631b4b7a9704ad5a92fd6882725876db5902a808413740fe1348d8558e9bba74d256e14b48ed622ba1459ae4f75bdf964aa978d63b21c7f2590db1186817df3b11d1f5931420dbb18f74dcc495178c649732c45f4a3794ed478b1a58bad58e76fd05a1191100052c36d615f8757a6d5e7a07f1117db6bfdea959b59de6066d0cf01d1144cee4bcc9b18dddcc53c80f080d5fe11e27035edb67b39d1abdf08d48c0441ce187e1c82da479d5aedbafb31730dfe38c8ef68c1662980748fefd497aca208875cfe5550ea3d73c4412242d2be759149f3cef595c43bfad634a71a8d25e229"}, {@none, 0x8, 0x5, "9b5e70", 0x3, 0x8, "2b747d5d0d8643579325f2bfd60615c92b6c26f8af3ab3ddfc9154cafd19a0bcf7c037c1db5b32d5981be5a3eb9fded9b35e900f3f6033fd2ad49d93028242e1b3126d06f3d8dca368d2040d492dabee1701b79a4da9798838c0e5efef68bc8ddc6eb09628e58cb6508943a8e87b4ff072e95cf13c89a70e408ae64646e76eaca67938b4b4d68d7cb68f66382785210c8b2f3b95c55bc30009fdd65e8b7aef75c867efecf8b8702ed679dc3069ec731b233c1a6e965a012c051ee76fb3bdc41884a3076e9b00657c0251a56a61a9cd7e929335ed42fd25c22956db1621a69b28b64d5e733658cf09ae3fb32d1163abbd"}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7, 0xff, "3a9030", 0x2, 0x25, "52a38f3648afc3e446906b8777605253de0fcd69e2197c72b2da3be7b211e2d5cfc86d5eb96c594ecf9fe12c433ec28c2c479ff7a6f0971084ddf461fbcbcf9a98fc35e3f31b1fc401db9e336c51f61ac45de2f0bc78168d43fa92feda16acf900c632bed02d40650b97bf0fca06f1187e30fb9e3ff5955d2ca60b23cf411788a9fbdb1f424aae079fff3c4c5aeef79dd0bc21f5232bd5cc683b11da1b32ec5bea7daaf28ed5f599cb02920d757f286a017fc88c49ce3a146aee6c438680b2dbd079ece741c34009334f629406028feb708ec46eb9f3e6e31b1936235c8519c904f665baedfebc43b492bba76f26fb4b"}, {@none, 0x9, 0x0, "adb82a", 0x83ef, 0xd6, "a28ecdaa0cf1e526194ee018c054204973d30963b94e248c40ff1e10b2fc1c67d7b5a03c3d2b2e19a53a3f9c4d07afff976eb834b6445a3cf85a526e820e272dbdeef4bafa31e9f06e0296e2a704d41656b2adedd519d385043153da364882911cabd6a96f0c19186928cf4e2b39ee4352ce8ea1c23877113f141116a71dbbf17c00e96970f59c1fa1b7d799046880d691a211e48be762a8d6eca80201bfa2ac74c052da0925e50cb55f8449ff2736aa8b650fd2303de7bbe32620f75d0d2f9260e0250ec7e54d95638af75a62c58ff46e6423fa34e35cab8208231b14f547a07ed29524d972d766f1ad2a3eca272850"}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3f, 0x15, "2b48cb", 0xc043, 0x3, "78c216718f5dcf8926001ac7650c532f6f5800dd9d00b07a02a6ea886b9322b3b8af2fd7de37607646df14dd964337e351c0dfd3a960cabdf436a47dde777a5bf579f635fbe2e3e3bf95c66a48cbadc0ece465bc0b184aff7a644202bedbb8f9956b0e11b86535e34a757f38d2bc5405a010dce642b5b7265ff4048935f777bed42428901e2cdeb9815e89fb192b5c3ad5c6beaffabf68de3290801a6e307dccc42a8a3a17a567a52aa504688e698dc607f6610fe6b62b6e80226fbdce844dd2afe5e65100964c1663874ecf004c97bd5c24550770dfc44a70606a19733edaf9fe22aa663429a718b2b7ab489a7a3df7"}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x20, 0x2, "823a51", 0x563e, 0x56, "d60a199e0fd7de7efb29a5861ed4caf2218e932c8859c95ce801d628771574c5ff764cd9c12db2acc9372503588a9e4395630591c93c0d394a564556b6ec234f158ed40baddffd9761d972ef009fb7a26d31d781f23932b915c0b8fda49b7f2bc4930fb5af580f92eb0d6f73a51b1aee357325657a54b7cb2d64348290666f34a2ce9e308e8eaffd07318cdb14b4db008c34869aa69b1355c4295bf83534cb673de09fa8a2d71e9d7ecad7322b57ea93655aee2504a948e94ed1d628ee2747133631a92283655f2515aa1c54859d4a6990ff80f33a7e4821d19ddfb50d2885e8e830565e64170784632480438e3f409f"}, {@any, 0x2, 0x2, 'u:k', 0xc90a, 0x47, "ae710a4c3915a9a62379ccf4fbe24f0271195fcd5d9cdc6e1d2f21bff9174d7869a294a438b911be75c4f781fe79f0eaafff7a098b537fc9a825ce7db707ebb421e1047a05dfdb346189ecf1a68a3f0d00538b39a26809974c202e4383b05dc207cbf3076f38e23b4cd82c67dcbf97cdaded815af34becc610471842262dd97c6e7c5f1c73f36b081f7c8b5679f6debf68ec802f11aa240d2a5f3e43abb4043afa35a548b2b404e03482fd92205c73c85dd1acfa28d2d8087bb08fa94db1432c628de4f84a240e20d413fa86151d65d8c17d4cb864088339770485dfb22dee7651be1c655a78166a1a4fefc3b1affd6e"}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7, 0xff, "5a1c3c", 0xbd, 0xff, "cb927faba72bea7caf116ef4b391ca51cb4952983e592f5f222f7176b1d45b40b01638b8974f24ade2d212ded283ba5dfb5a1191b7def6cdc0f0db5984db04dae8a8c1bb98accda12ddce403fe510b6e759844b849afd30ee08c20ba1c011a605031b7061f55fbd33eb7be682d96420c66fe0566754268517a293e190a54447b0e7c2b0d1c641097e9dfba61cabfe5c52703dac2d678984aafe4fd5744a0124fa72818ac0e92e6eec34b01b1f4ff3d3cfe40f619825412cb921c72a8482b40acb028ae6216aa995f5b23e8ccbacdad94703abaab1a6ace16fa60f483f8f7e1414d7b46ad4414575cd4e0f34113ba5b0b"}, {@any, 0x1, 0x4, 'aev', 0xac0, 0x3, "1abe84d8ba0593905b40da1328757917b64b945a88923768e7a6a967b5a9abf1809a314f8c7223138104f21ec8c5c70ffb957020237a80288d68d80c2af1022afe7da7dca4a40b9b1ee701fa3a81df6d6e3a8f35925b05c11875a385c5d9cbda77df58d12f31f60a04fa4d484211e8f63e68dae3b60c5129644a55f42f1ef43fb6ce680023b54c2a6464222381226a620c06f46b878a1f9980643db754353a80edea7c0f05d744dc40d4701e3f4c9ebb108455406723f3ffc28e2bae8f6614504abd3807a1a541d51285df8a3492f1c8f70cd3b3e56faf546403bb4212a988d82c643fdf9ca3210d722909ce09c51a1b"}]}}}, 0x9f0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_channel_selected={{0x41, 0x1}, {0xedb2a098540029f6}}}, 0x4) [ 723.065966][ T27] audit: type=1800 audit(1664078920.503:393): pid=12560 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=".pending_reads" dev="sda1" ino=1170 res=0 errno=0 04:08:40 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time_recursive\x00', 0x26e1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x4, &(0x7f00000000c0)=ANY=[@ANYRES16=r0, @ANYRES16=r1, @ANYRESDEC=r0, @ANYRES8, @ANYRESDEC], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001400)={&(0x7f00000013c0)='ext4_es_find_extent_range_enter\x00'}, 0x10) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r2, 0xff, 0x0, 0x0, 0x0) syncfs(r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r3, &(0x7f0000000000), 0x20b000) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000200)='illinois\x00', 0x9) bind$inet(0xffffffffffffffff, &(0x7f0000000300)={0x2, 0x4e24, @empty}, 0x10) setsockopt$inet_tcp_int(r4, 0x6, 0x2, &(0x7f0000000000)=0x2805, 0x4) r5 = openat(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x40, 0x5) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000280)={0x0, &(0x7f00000001c0)}, 0x10) close(0xffffffffffffffff) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e20, @loopback}, 0x10) sendfile(r4, r5, 0x0, 0x90000) recvmsg(r4, &(0x7f0000000580)={0x0, 0x41, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4084, 0xfffffe1f}], 0x6, 0x0, 0xfffffffffffffcc9}, 0x700) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time_recursive\x00', 0x26e1, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x4, &(0x7f00000000c0)=ANY=[@ANYRES16=r0, @ANYRES16=r1, @ANYRESDEC=r0, @ANYRES8, @ANYRESDEC], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001400)={&(0x7f00000013c0)='ext4_es_find_extent_range_enter\x00'}, 0x10) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) getsockopt(r2, 0xff, 0x0, 0x0, 0x0) (async) syncfs(r2) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async) write$cgroup_type(r3, &(0x7f0000000000), 0x20b000) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000200)='illinois\x00', 0x9) (async) bind$inet(0xffffffffffffffff, &(0x7f0000000300)={0x2, 0x4e24, @empty}, 0x10) (async) setsockopt$inet_tcp_int(r4, 0x6, 0x2, &(0x7f0000000000)=0x2805, 0x4) (async) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x40, 0x5) (async) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000280)={0x0, &(0x7f00000001c0)}, 0x10) (async) close(0xffffffffffffffff) (async) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e20, @loopback}, 0x10) (async) sendfile(r4, r5, 0x0, 0x90000) (async) recvmsg(r4, &(0x7f0000000580)={0x0, 0x41, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4084, 0xfffffe1f}], 0x6, 0x0, 0xfffffffffffffcc9}, 0x700) (async) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, 0x0) (async) [ 723.162697][ C1] [ 723.165089][ C1] ====================================================== [ 723.172112][ C1] WARNING: possible circular locking dependency detected [ 723.179226][ C1] 6.0.0-rc6-syzkaller-00309-g1a61b828566f #0 Not tainted [ 723.186337][ C1] ------------------------------------------------------ [ 723.193353][ C1] kworker/u4:2/41 is trying to acquire lock: [ 723.199331][ C1] ffff88801dc65d70 (&q->queue_lock){..-.}-{2:2}, at: throtl_pending_timer_fn+0xf7/0x1690 [ 723.209187][ C1] 04:08:40 executing program 3: r0 = syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000040)='./file1\x00', 0x0, 0x0, &(0x7f0000000200), 0x800000, &(0x7f0000000500)=ANY=[], 0x0) symlinkat(&(0x7f0000002940)='./file0\x00', r0, &(0x7f0000001900)='./file1\x00') renameat2(r0, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file1\x00', 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0xee01, 0xffffffffffffffff}}, './file0\x00'}) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x2080402, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@lowerdir={'lowerdir', 0x3d, './file2'}}, {@xino_off}, {@index_off}, {@metacopy_off}], [{@rootcontext={'rootcontext', 0x3d, 'root'}}, {@smackfsroot={'smackfsroot', 0x3d, 'minix\x00'}}, {@euid_lt={'euid<', r2}}, {@pcr={'pcr', 0x3d, 0x2b}}, {@dont_appraise}, {@fowner_gt={'fowner>', r3}}]}) [ 723.209187][ C1] but task is already holding lock: [ 723.216637][ C1] ffffc900001f0d70 ((&sq->pending_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd5/0x6b0 [ 723.226069][ C1] [ 723.226069][ C1] which lock already depends on the new lock. [ 723.226069][ C1] [ 723.236462][ C1] [ 723.236462][ C1] the existing dependency chain (in reverse order) is: [ 723.245549][ C1] [ 723.245549][ C1] -> #2 ((&sq->pending_timer)){+.-.}-{0:0}: [ 723.253617][ C1] del_timer_sync+0x5b/0x1b0 [ 723.258729][ C1] throtl_pd_free+0x15/0x40 [ 723.263748][ C1] blkcg_deactivate_policy+0x26c/0x470 [ 723.269720][ C1] blk_throtl_exit+0x8a/0x1a0 [ 723.274912][ C1] blkcg_init_queue+0x19b/0x620 [ 723.280275][ C1] __alloc_disk_node+0x29d/0x650 [ 723.285727][ C1] __blk_mq_alloc_disk+0x13b/0x1f0 [ 723.291349][ C1] loop_add+0x3e2/0xaf0 [ 723.296022][ C1] loop_control_ioctl+0x133/0x620 [ 723.301581][ C1] __x64_sys_ioctl+0x193/0x200 [ 723.306869][ C1] do_syscall_64+0x35/0xb0 [ 723.311810][ C1] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 723.318225][ C1] [ 723.318225][ C1] -> #1 (&blkcg->lock){....}-{2:2}: [ 723.325612][ C1] _raw_spin_lock+0x2a/0x40 [ 723.330641][ C1] blkg_create+0x461/0x1020 [ 723.335663][ C1] blkcg_init_queue+0xb2/0x620 [ 723.340944][ C1] __alloc_disk_node+0x29d/0x650 [ 723.346408][ C1] __blk_alloc_disk+0x35/0x90 [ 723.351604][ C1] brd_alloc.part.0+0x27f/0x7a0 [ 723.356979][ C1] brd_init+0x1b8/0x24b [ 723.361652][ C1] do_one_initcall+0xfe/0x650 [ 723.366882][ C1] kernel_init_freeable+0x6b1/0x73a [ 723.372632][ C1] kernel_init+0x1a/0x1d0 [ 723.377469][ C1] ret_from_fork+0x1f/0x30 [ 723.382398][ C1] [ 723.382398][ C1] -> #0 (&q->queue_lock){..-.}-{2:2}: [ 723.389945][ C1] __lock_acquire+0x2a43/0x56d0 [ 723.395308][ C1] lock_acquire+0x1ab/0x570 [ 723.400319][ C1] _raw_spin_lock_irq+0x32/0x50 [ 723.405683][ C1] throtl_pending_timer_fn+0xf7/0x1690 [ 723.411654][ C1] call_timer_fn+0x1a0/0x6b0 [ 723.416759][ C1] __run_timers.part.0+0x674/0xa80 [ 723.422381][ C1] run_timer_softirq+0xb3/0x1d0 [ 723.427752][ C1] __do_softirq+0x1d3/0x9c6 [ 723.432772][ C1] __irq_exit_rcu+0x123/0x180 [ 723.438051][ C1] irq_exit_rcu+0x5/0x20 [ 723.442804][ C1] sysvec_apic_timer_interrupt+0x93/0xc0 [ 723.448953][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 723.455451][ C1] lock_acquire+0x1ef/0x570 [ 723.460471][ C1] batadv_nc_worker+0x12d/0xfa0 [ 723.465838][ C1] process_one_work+0x991/0x1610 [ 723.471297][ C1] worker_thread+0x665/0x1080 [ 723.476498][ C1] kthread+0x2e4/0x3a0 [ 723.481085][ C1] ret_from_fork+0x1f/0x30 [ 723.486024][ C1] [ 723.486024][ C1] other info that might help us debug this: [ 723.486024][ C1] [ 723.496244][ C1] Chain exists of: [ 723.496244][ C1] &q->queue_lock --> &blkcg->lock --> (&sq->pending_timer) [ 723.496244][ C1] [ 723.509362][ C1] Possible unsafe locking scenario: [ 723.509362][ C1] [ 723.516807][ C1] CPU0 CPU1 [ 723.522160][ C1] ---- ---- [ 723.527520][ C1] lock((&sq->pending_timer)); [ 723.532361][ C1] lock(&blkcg->lock); [ 723.539032][ C1] lock((&sq->pending_timer)); [ 723.546398][ C1] lock(&q->queue_lock); [ 723.550723][ C1] [ 723.550723][ C1] *** DEADLOCK *** [ 723.550723][ C1] [ 723.558909][ C1] 4 locks held by kworker/u4:2/41: [ 723.564025][ C1] #0: ffff888026695138 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_one_work+0x87a/0x1610 [ 723.574754][ C1] #1: ffffc90000b27da8 ((work_completion)(&(&bat_priv->nc.work)->work)){+.+.}-{0:0}, at: process_one_work+0x8ae/0x1610 [ 723.587283][ C1] #2: ffffffff8bf89400 (rcu_read_lock){....}-{1:2}, at: batadv_nc_worker+0xf3/0xfa0 [ 723.596772][ C1] #3: ffffc900001f0d70 ((&sq->pending_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd5/0x6b0 [ 723.606611][ C1] [ 723.606611][ C1] stack backtrace: [ 723.612485][ C1] CPU: 1 PID: 41 Comm: kworker/u4:2 Not tainted 6.0.0-rc6-syzkaller-00309-g1a61b828566f #0 [ 723.622461][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 723.632517][ C1] Workqueue: bat_events batadv_nc_worker [ 723.638363][ C1] Call Trace: [ 723.641638][ C1] [ 723.644477][ C1] dump_stack_lvl+0xcd/0x134 [ 723.649078][ C1] check_noncircular+0x25f/0x2e0 [ 723.654018][ C1] ? print_circular_bug+0x1e0/0x1e0 [ 723.659213][ C1] ? lock_chain_count+0x20/0x20 [ 723.664059][ C1] ? register_lock_class+0xbe/0x1120 [ 723.669342][ C1] __lock_acquire+0x2a43/0x56d0 [ 723.674196][ C1] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 723.680176][ C1] lock_acquire+0x1ab/0x570 [ 723.684755][ C1] ? throtl_pending_timer_fn+0xf7/0x1690 [ 723.690412][ C1] ? lock_release+0x780/0x780 [ 723.695089][ C1] ? _raw_spin_lock_irq+0x41/0x50 [ 723.700120][ C1] ? throtl_pd_offline+0x1d0/0x1d0 [ 723.705227][ C1] _raw_spin_lock_irq+0x32/0x50 [ 723.710073][ C1] ? throtl_pending_timer_fn+0xf7/0x1690 [ 723.715703][ C1] throtl_pending_timer_fn+0xf7/0x1690 [ 723.721157][ C1] ? throtl_pd_offline+0x1d0/0x1d0 [ 723.726263][ C1] call_timer_fn+0x1a0/0x6b0 [ 723.731025][ C1] ? timer_fixup_activate+0x350/0x350 [ 723.736391][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 723.741585][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 723.746779][ C1] ? throtl_pd_offline+0x1d0/0x1d0 [ 723.751886][ C1] __run_timers.part.0+0x674/0xa80 [ 723.756999][ C1] ? call_timer_fn+0x6b0/0x6b0 [ 723.761757][ C1] ? cpuacct_all_seq_show+0x520/0x520 [ 723.767134][ C1] run_timer_softirq+0xb3/0x1d0 [ 723.771980][ C1] __do_softirq+0x1d3/0x9c6 [ 723.776481][ C1] __irq_exit_rcu+0x123/0x180 [ 723.781152][ C1] irq_exit_rcu+0x5/0x20 [ 723.785387][ C1] sysvec_apic_timer_interrupt+0x93/0xc0 [ 723.791017][ C1] [ 723.793938][ C1] [ 723.796857][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 723.802834][ C1] RIP: 0010:lock_acquire+0x1ef/0x570 [ 723.808113][ C1] Code: fa a2 7e 83 f8 01 0f 85 e8 02 00 00 9c 58 f6 c4 02 0f 85 fb 02 00 00 48 83 7c 24 08 00 74 01 fb 48 b8 00 00 00 00 00 fc ff df <48> 01 c3 48 c7 03 00 00 00 00 48 c7 43 08 00 00 00 00 48 8b 84 24 [ 723.827819][ C1] RSP: 0018:ffffc90000b27b98 EFLAGS: 00000206 [ 723.833876][ C1] RAX: dffffc0000000000 RBX: 1ffff92000164f75 RCX: d14b18ce0fb3a745 [ 723.841835][ C1] RDX: 1ffff11002f8b4fe RSI: 0000000000000000 RDI: 0000000000000000 [ 723.849796][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff908e5947 [ 723.857755][ C1] R10: fffffbfff211cb28 R11: 0000000000000000 R12: 0000000000000002 [ 723.865748][ C1] R13: 0000000000000000 R14: ffffffff8bf89400 R15: 0000000000000000 [ 723.874077][ C1] ? lock_release+0x780/0x780 [ 723.878769][ C1] ? batadv_nc_worker+0x849/0xfa0 [ 723.883967][ C1] ? lock_downgrade+0x6e0/0x6e0 [ 723.888826][ C1] batadv_nc_worker+0x12d/0xfa0 [ 723.893676][ C1] ? batadv_nc_worker+0xf3/0xfa0 [ 723.898612][ C1] process_one_work+0x991/0x1610 [ 723.903552][ C1] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 723.908920][ C1] ? rwlock_bug.part.0+0x90/0x90 [ 723.913875][ C1] ? _raw_spin_lock_irq+0x41/0x50 [ 723.918898][ C1] worker_thread+0x665/0x1080 [ 723.923747][ C1] ? __kthread_parkme+0x15f/0x220 [ 723.928763][ C1] ? process_one_work+0x1610/0x1610 [ 723.934042][ C1] kthread+0x2e4/0x3a0 [ 723.938102][ C1] ? kthread_complete_and_exit+0x40/0x40 [ 723.943767][ C1] ret_from_fork+0x1f/0x30 [ 723.948208][ C1] 04:08:41 executing program 2: syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @extended_inquiry_info={{0x2f, 0x9ed}, {0xa, [{@any, 0x40, 0x66, "f21e48", 0x1f, 0x81, "40b6b685e7b95199679583c4e9308a2057f6b329d7f71bf0438af5ea4cb5b946c1ad10f4d36fc9aa65c59175826b2f967c308a9383d9860f254fd362cc14577b65db24694e91e9c82e2bc86ac5c389aeb41ab109c3729d12b08ce7ff6c22b95e4c6543ef79eeb2a270443445e292193313860265946b20692bcaa7d5fb8e012cb312e8e303372958efa2be9e41a0f59e662a008b2ce333d7e7940b8bb5c1c78615df491e68d569d5888789a132ffa3ec1858802304166ea8a81ece3cd991ca8567c3024249436bd0a9197be4e82f579f0e4bfc1155f0edde31c63f1b5067a2182a31d1d78e4e7e59121d43267b500679"}, {@any, 0x3f, 0x8, "2cf949", 0x1, 0x1, "c4dcc2bb58cc10ee0ed59756ed8631b4b7a9704ad5a92fd6882725876db5902a808413740fe1348d8558e9bba74d256e14b48ed622ba1459ae4f75bdf964aa978d63b21c7f2590db1186817df3b11d1f5931420dbb18f74dcc495178c649732c45f4a3794ed478b1a58bad58e76fd05a1191100052c36d615f8757a6d5e7a07f1117db6bfdea959b59de6066d0cf01d1144cee4bcc9b18dddcc53c80f080d5fe11e27035edb67b39d1abdf08d48c0441ce187e1c82da479d5aedbafb31730dfe38c8ef68c1662980748fefd497aca208875cfe5550ea3d73c4412242d2be759149f3cef595c43bfad634a71a8d25e229"}, {@none, 0x8, 0x5, "9b5e70", 0x3, 0x8, "2b747d5d0d8643579325f2bfd60615c92b6c26f8af3ab3ddfc9154cafd19a0bcf7c037c1db5b32d5981be5a3eb9fded9b35e900f3f6033fd2ad49d93028242e1b3126d06f3d8dca368d2040d492dabee1701b79a4da9798838c0e5efef68bc8ddc6eb09628e58cb6508943a8e87b4ff072e95cf13c89a70e408ae64646e76eaca67938b4b4d68d7cb68f66382785210c8b2f3b95c55bc30009fdd65e8b7aef75c867efecf8b8702ed679dc3069ec731b233c1a6e965a012c051ee76fb3bdc41884a3076e9b00657c0251a56a61a9cd7e929335ed42fd25c22956db1621a69b28b64d5e733658cf09ae3fb32d1163abbd"}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7, 0xff, "3a9030", 0x2, 0x25, "52a38f3648afc3e446906b8777605253de0fcd69e2197c72b2da3be7b211e2d5cfc86d5eb96c594ecf9fe12c433ec28c2c479ff7a6f0971084ddf461fbcbcf9a98fc35e3f31b1fc401db9e336c51f61ac45de2f0bc78168d43fa92feda16acf900c632bed02d40650b97bf0fca06f1187e30fb9e3ff5955d2ca60b23cf411788a9fbdb1f424aae079fff3c4c5aeef79dd0bc21f5232bd5cc683b11da1b32ec5bea7daaf28ed5f599cb02920d757f286a017fc88c49ce3a146aee6c438680b2dbd079ece741c34009334f629406028feb708ec46eb9f3e6e31b1936235c8519c904f665baedfebc43b492bba76f26fb4b"}, {@none, 0x9, 0x0, "adb82a", 0x83ef, 0xd6, "a28ecdaa0cf1e526194ee018c054204973d30963b94e248c40ff1e10b2fc1c67d7b5a03c3d2b2e19a53a3f9c4d07afff976eb834b6445a3cf85a526e820e272dbdeef4bafa31e9f06e0296e2a704d41656b2adedd519d385043153da364882911cabd6a96f0c19186928cf4e2b39ee4352ce8ea1c23877113f141116a71dbbf17c00e96970f59c1fa1b7d799046880d691a211e48be762a8d6eca80201bfa2ac74c052da0925e50cb55f8449ff2736aa8b650fd2303de7bbe32620f75d0d2f9260e0250ec7e54d95638af75a62c58ff46e6423fa34e35cab8208231b14f547a07ed29524d972d766f1ad2a3eca272850"}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3f, 0x15, "2b48cb", 0xc043, 0x3, "78c216718f5dcf8926001ac7650c532f6f5800dd9d00b07a02a6ea886b9322b3b8af2fd7de37607646df14dd964337e351c0dfd3a960cabdf436a47dde777a5bf579f635fbe2e3e3bf95c66a48cbadc0ece465bc0b184aff7a644202bedbb8f9956b0e11b86535e34a757f38d2bc5405a010dce642b5b7265ff4048935f777bed42428901e2cdeb9815e89fb192b5c3ad5c6beaffabf68de3290801a6e307dccc42a8a3a17a567a52aa504688e698dc607f6610fe6b62b6e80226fbdce844dd2afe5e65100964c1663874ecf004c97bd5c24550770dfc44a70606a19733edaf9fe22aa663429a718b2b7ab489a7a3df7"}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x20, 0x2, "823a51", 0x563e, 0x56, "d60a199e0fd7de7efb29a5861ed4caf2218e932c8859c95ce801d628771574c5ff764cd9c12db2acc9372503588a9e4395630591c93c0d394a564556b6ec234f158ed40baddffd9761d972ef009fb7a26d31d781f23932b915c0b8fda49b7f2bc4930fb5af580f92eb0d6f73a51b1aee357325657a54b7cb2d64348290666f34a2ce9e308e8eaffd07318cdb14b4db008c34869aa69b1355c4295bf83534cb673de09fa8a2d71e9d7ecad7322b57ea93655aee2504a948e94ed1d628ee2747133631a92283655f2515aa1c54859d4a6990ff80f33a7e4821d19ddfb50d2885e8e830565e64170784632480438e3f409f"}, {@any, 0x2, 0x2, 'u:k', 0xc90a, 0x47, "ae710a4c3915a9a62379ccf4fbe24f0271195fcd5d9cdc6e1d2f21bff9174d7869a294a438b911be75c4f781fe79f0eaafff7a098b537fc9a825ce7db707ebb421e1047a05dfdb346189ecf1a68a3f0d00538b39a26809974c202e4383b05dc207cbf3076f38e23b4cd82c67dcbf97cdaded815af34becc610471842262dd97c6e7c5f1c73f36b081f7c8b5679f6debf68ec802f11aa240d2a5f3e43abb4043afa35a548b2b404e03482fd92205c73c85dd1acfa28d2d8087bb08fa94db1432c628de4f84a240e20d413fa86151d65d8c17d4cb864088339770485dfb22dee7651be1c655a78166a1a4fefc3b1affd6e"}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7, 0xff, "5a1c3c", 0xbd, 0xff, "cb927faba72bea7caf116ef4b391ca51cb4952983e592f5f222f7176b1d45b40b01638b8974f24ade2d212ded283ba5dfb5a1191b7def6cdc0f0db5984db04dae8a8c1bb98accda12ddce403fe510b6e759844b849afd30ee08c20ba1c011a605031b7061f55fbd33eb7be682d96420c66fe0566754268517a293e190a54447b0e7c2b0d1c641097e9dfba61cabfe5c52703dac2d678984aafe4fd5744a0124fa72818ac0e92e6eec34b01b1f4ff3d3cfe40f619825412cb921c72a8482b40acb028ae6216aa995f5b23e8ccbacdad94703abaab1a6ace16fa60f483f8f7e1414d7b46ad4414575cd4e0f34113ba5b0b"}, {@any, 0x1, 0x4, 'aev', 0xac0, 0x3, "1abe84d8ba0593905b40da1328757917b64b945a88923768e7a6a967b5a9abf1809a314f8c7223138104f21ec8c5c70ffb957020237a80288d68d80c2af1022afe7da7dca4a40b9b1ee701fa3a81df6d6e3a8f35925b05c11875a385c5d9cbda77df58d12f31f60a04fa4d484211e8f63e68dae3b60c5129644a55f42f1ef43fb6ce680023b54c2a6464222381226a620c06f46b878a1f9980643db754353a80edea7c0f05d744dc40d4701e3f4c9ebb108455406723f3ffc28e2bae8f6614504abd3807a1a541d51285df8a3492f1c8f70cd3b3e56faf546403bb4212a988d82c643fdf9ca3210d722909ce09c51a1b"}]}}}, 0x9f0) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_channel_selected={{0x41, 0x1}, {0xedb2a098540029f6}}}, 0x4) 04:08:41 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time_recursive\x00', 0x26e1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x4, &(0x7f00000000c0)=ANY=[@ANYRES16=r0, @ANYRES16=r1, @ANYRESDEC=r0, @ANYRES8, @ANYRESDEC], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001400)={&(0x7f00000013c0)='ext4_es_find_extent_range_enter\x00'}, 0x10) (async) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r2, 0xff, 0x0, 0x0, 0x0) (async) syncfs(r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r3, &(0x7f0000000000), 0x20b000) (async) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000200)='illinois\x00', 0x9) (async) bind$inet(0xffffffffffffffff, &(0x7f0000000300)={0x2, 0x4e24, @empty}, 0x10) setsockopt$inet_tcp_int(r4, 0x6, 0x2, &(0x7f0000000000)=0x2805, 0x4) (async) r5 = openat(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x40, 0x5) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000280)={0x0, &(0x7f00000001c0)}, 0x10) close(0xffffffffffffffff) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e20, @loopback}, 0x10) (async) sendfile(r4, r5, 0x0, 0x90000) recvmsg(r4, &(0x7f0000000580)={0x0, 0x41, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4084, 0xfffffe1f}], 0x6, 0x0, 0xfffffffffffffcc9}, 0x700) (async) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, 0x0) 04:08:41 executing program 2: syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @extended_inquiry_info={{0x2f, 0x9ed}, {0xa, [{@any, 0x40, 0x66, "f21e48", 0x1f, 0x81, "40b6b685e7b95199679583c4e9308a2057f6b329d7f71bf0438af5ea4cb5b946c1ad10f4d36fc9aa65c59175826b2f967c308a9383d9860f254fd362cc14577b65db24694e91e9c82e2bc86ac5c389aeb41ab109c3729d12b08ce7ff6c22b95e4c6543ef79eeb2a270443445e292193313860265946b20692bcaa7d5fb8e012cb312e8e303372958efa2be9e41a0f59e662a008b2ce333d7e7940b8bb5c1c78615df491e68d569d5888789a132ffa3ec1858802304166ea8a81ece3cd991ca8567c3024249436bd0a9197be4e82f579f0e4bfc1155f0edde31c63f1b5067a2182a31d1d78e4e7e59121d43267b500679"}, {@any, 0x3f, 0x8, "2cf949", 0x1, 0x1, "c4dcc2bb58cc10ee0ed59756ed8631b4b7a9704ad5a92fd6882725876db5902a808413740fe1348d8558e9bba74d256e14b48ed622ba1459ae4f75bdf964aa978d63b21c7f2590db1186817df3b11d1f5931420dbb18f74dcc495178c649732c45f4a3794ed478b1a58bad58e76fd05a1191100052c36d615f8757a6d5e7a07f1117db6bfdea959b59de6066d0cf01d1144cee4bcc9b18dddcc53c80f080d5fe11e27035edb67b39d1abdf08d48c0441ce187e1c82da479d5aedbafb31730dfe38c8ef68c1662980748fefd497aca208875cfe5550ea3d73c4412242d2be759149f3cef595c43bfad634a71a8d25e229"}, {@none, 0x8, 0x5, "9b5e70", 0x3, 0x8, "2b747d5d0d8643579325f2bfd60615c92b6c26f8af3ab3ddfc9154cafd19a0bcf7c037c1db5b32d5981be5a3eb9fded9b35e900f3f6033fd2ad49d93028242e1b3126d06f3d8dca368d2040d492dabee1701b79a4da9798838c0e5efef68bc8ddc6eb09628e58cb6508943a8e87b4ff072e95cf13c89a70e408ae64646e76eaca67938b4b4d68d7cb68f66382785210c8b2f3b95c55bc30009fdd65e8b7aef75c867efecf8b8702ed679dc3069ec731b233c1a6e965a012c051ee76fb3bdc41884a3076e9b00657c0251a56a61a9cd7e929335ed42fd25c22956db1621a69b28b64d5e733658cf09ae3fb32d1163abbd"}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7, 0xff, "3a9030", 0x2, 0x25, "52a38f3648afc3e446906b8777605253de0fcd69e2197c72b2da3be7b211e2d5cfc86d5eb96c594ecf9fe12c433ec28c2c479ff7a6f0971084ddf461fbcbcf9a98fc35e3f31b1fc401db9e336c51f61ac45de2f0bc78168d43fa92feda16acf900c632bed02d40650b97bf0fca06f1187e30fb9e3ff5955d2ca60b23cf411788a9fbdb1f424aae079fff3c4c5aeef79dd0bc21f5232bd5cc683b11da1b32ec5bea7daaf28ed5f599cb02920d757f286a017fc88c49ce3a146aee6c438680b2dbd079ece741c34009334f629406028feb708ec46eb9f3e6e31b1936235c8519c904f665baedfebc43b492bba76f26fb4b"}, {@none, 0x9, 0x0, "adb82a", 0x83ef, 0xd6, "a28ecdaa0cf1e526194ee018c054204973d30963b94e248c40ff1e10b2fc1c67d7b5a03c3d2b2e19a53a3f9c4d07afff976eb834b6445a3cf85a526e820e272dbdeef4bafa31e9f06e0296e2a704d41656b2adedd519d385043153da364882911cabd6a96f0c19186928cf4e2b39ee4352ce8ea1c23877113f141116a71dbbf17c00e96970f59c1fa1b7d799046880d691a211e48be762a8d6eca80201bfa2ac74c052da0925e50cb55f8449ff2736aa8b650fd2303de7bbe32620f75d0d2f9260e0250ec7e54d95638af75a62c58ff46e6423fa34e35cab8208231b14f547a07ed29524d972d766f1ad2a3eca272850"}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3f, 0x15, "2b48cb", 0xc043, 0x3, "78c216718f5dcf8926001ac7650c532f6f5800dd9d00b07a02a6ea886b9322b3b8af2fd7de37607646df14dd964337e351c0dfd3a960cabdf436a47dde777a5bf579f635fbe2e3e3bf95c66a48cbadc0ece465bc0b184aff7a644202bedbb8f9956b0e11b86535e34a757f38d2bc5405a010dce642b5b7265ff4048935f777bed42428901e2cdeb9815e89fb192b5c3ad5c6beaffabf68de3290801a6e307dccc42a8a3a17a567a52aa504688e698dc607f6610fe6b62b6e80226fbdce844dd2afe5e65100964c1663874ecf004c97bd5c24550770dfc44a70606a19733edaf9fe22aa663429a718b2b7ab489a7a3df7"}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x20, 0x2, "823a51", 0x563e, 0x56, "d60a199e0fd7de7efb29a5861ed4caf2218e932c8859c95ce801d628771574c5ff764cd9c12db2acc9372503588a9e4395630591c93c0d394a564556b6ec234f158ed40baddffd9761d972ef009fb7a26d31d781f23932b915c0b8fda49b7f2bc4930fb5af580f92eb0d6f73a51b1aee357325657a54b7cb2d64348290666f34a2ce9e308e8eaffd07318cdb14b4db008c34869aa69b1355c4295bf83534cb673de09fa8a2d71e9d7ecad7322b57ea93655aee2504a948e94ed1d628ee2747133631a92283655f2515aa1c54859d4a6990ff80f33a7e4821d19ddfb50d2885e8e830565e64170784632480438e3f409f"}, {@any, 0x2, 0x2, 'u:k', 0xc90a, 0x47, "ae710a4c3915a9a62379ccf4fbe24f0271195fcd5d9cdc6e1d2f21bff9174d7869a294a438b911be75c4f781fe79f0eaafff7a098b537fc9a825ce7db707ebb421e1047a05dfdb346189ecf1a68a3f0d00538b39a26809974c202e4383b05dc207cbf3076f38e23b4cd82c67dcbf97cdaded815af34becc610471842262dd97c6e7c5f1c73f36b081f7c8b5679f6debf68ec802f11aa240d2a5f3e43abb4043afa35a548b2b404e03482fd92205c73c85dd1acfa28d2d8087bb08fa94db1432c628de4f84a240e20d413fa86151d65d8c17d4cb864088339770485dfb22dee7651be1c655a78166a1a4fefc3b1affd6e"}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7, 0xff, "5a1c3c", 0xbd, 0xff, "cb927faba72bea7caf116ef4b391ca51cb4952983e592f5f222f7176b1d45b40b01638b8974f24ade2d212ded283ba5dfb5a1191b7def6cdc0f0db5984db04dae8a8c1bb98accda12ddce403fe510b6e759844b849afd30ee08c20ba1c011a605031b7061f55fbd33eb7be682d96420c66fe0566754268517a293e190a54447b0e7c2b0d1c641097e9dfba61cabfe5c52703dac2d678984aafe4fd5744a0124fa72818ac0e92e6eec34b01b1f4ff3d3cfe40f619825412cb921c72a8482b40acb028ae6216aa995f5b23e8ccbacdad94703abaab1a6ace16fa60f483f8f7e1414d7b46ad4414575cd4e0f34113ba5b0b"}, {@any, 0x1, 0x4, 'aev', 0xac0, 0x3, "1abe84d8ba0593905b40da1328757917b64b945a88923768e7a6a967b5a9abf1809a314f8c7223138104f21ec8c5c70ffb957020237a80288d68d80c2af1022afe7da7dca4a40b9b1ee701fa3a81df6d6e3a8f35925b05c11875a385c5d9cbda77df58d12f31f60a04fa4d484211e8f63e68dae3b60c5129644a55f42f1ef43fb6ce680023b54c2a6464222381226a620c06f46b878a1f9980643db754353a80edea7c0f05d744dc40d4701e3f4c9ebb108455406723f3ffc28e2bae8f6614504abd3807a1a541d51285df8a3492f1c8f70cd3b3e56faf546403bb4212a988d82c643fdf9ca3210d722909ce09c51a1b"}]}}}, 0x9f0) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_channel_selected={{0x41, 0x1}, {0xedb2a098540029f6}}}, 0x4) [ 724.044063][T12579] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop3. [ 724.102706][ T3692] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 724.372624][ T3692] usb 2-1: Using ep0 maxpacket: 16 [ 724.502812][ T3692] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 724.693879][ T3692] usb 2-1: New USB device found, idVendor=15c2, idProduct=0040, bcdDevice=80.f3 [ 724.713843][ T3692] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 724.721902][ T3692] usb 2-1: Product: syz [ 724.736429][ T3692] usb 2-1: Manufacturer: syz [ 724.741161][ T3692] usb 2-1: SerialNumber: syz [ 724.769583][ T3692] usb 2-1: config 0 descriptor?? [ 724.814696][ T3692] input: iMON Panel, Knob and Mouse(15c2:0040) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input267 [ 725.102678][ T3692] rc_core: IR keymap rc-imon-pad not found [ 725.110184][ T3692] Registered IR keymap rc-empty [ 725.115789][ T3692] imon 2-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 725.127840][ T3692] imon 2-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 725.278702][ T3692] rc rc0: iMON Remote (15c2:0040) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 725.299650][ T3692] input: iMON Remote (15c2:0040) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input268 [ 725.329942][ T3692] imon 2-1:0.0: iMON device (15c2:0040, intf0) on usb<2:94> initialized [ 725.453236][T12563] imon:vfd_write: invalid payload size [ 725.459210][T12563] imon:vfd_write: invalid payload size [ 725.467122][T12563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 725.476521][T12563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 725.491754][ T3691] usb 2-1: USB disconnect, device number 94 [ 725.492590][ C0] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 729.272710][ T3653] Bluetooth: hci2: Opcode 0x c03 failed: -110 [ 732.156289][ T3655] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 732.165455][ T3655] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 732.172744][ T3655] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 732.180368][ T3655] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 732.187830][ T3655] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 732.195112][ T3655] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 732.294794][T12610] chnl_net:caif_netlink_parms(): no params data found [ 732.346323][T12610] bridge0: port 1(bridge_slave_0) entered blocking state [ 732.353515][T12610] bridge0: port 1(bridge_slave_0) entered disabled state [ 732.361235][T12610] device bridge_slave_0 entered promiscuous mode [ 732.369539][T12610] bridge0: port 2(bridge_slave_1) entered blocking state [ 732.376865][T12610] bridge0: port 2(bridge_slave_1) entered disabled state [ 732.384688][T12610] device bridge_slave_1 entered promiscuous mode [ 732.408544][T12610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 732.421259][T12610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 732.447339][T12610] team0: Port device team_slave_0 added [ 732.454325][T12610] team0: Port device team_slave_1 added [ 732.472916][T12610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 732.479862][T12610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 732.506231][T12610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 732.517927][T12610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 732.525043][T12610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 732.552215][T12610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 732.580389][T12610] device hsr_slave_0 entered promiscuous mode [ 732.587058][T12610] device hsr_slave_1 entered promiscuous mode [ 732.593774][T12610] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 732.601325][T12610] Cannot create hsr debugfs directory [ 732.717821][T12610] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 732.778402][T12610] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 732.863403][T12610] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 732.982990][T12610] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 733.101219][T12610] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 733.111803][T12610] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 733.121457][T12610] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 733.130728][T12610] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 733.152356][T12610] bridge0: port 2(bridge_slave_1) entered blocking state [ 733.159526][T12610] bridge0: port 2(bridge_slave_1) entered forwarding state [ 733.166900][T12610] bridge0: port 1(bridge_slave_0) entered blocking state [ 733.174001][T12610] bridge0: port 1(bridge_slave_0) entered forwarding state